Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-03-28, 23:41:52

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - sandipcd

Pages: [1] 2 3 ... 12
1
Kloxo-MR Technical Helps / Website refused to connect
« on: 2020-11-24, 12:23:41 »
I have just installed Kloxo-MR 7 in a new cloud server. And configure the website http://hostingultrasoone.com/ in the server. But it is down from start. Can you please help me to solve this issue? May I know is there any wrong configuration happened?

Please see below for all the information -

Code: [Select]
[root@hostingultrasoone ~]# sh /script/sysinfo; yum list installed kloxo*
A. Control Panel:
   - Kloxo-MR: 7.0.0.c-2019070501
   - Web: hiawatha-10.9.0-f.2.mr.el6.x86_64
   - PHP: php56s - 5.6.40-1.ius.el6 (fpm mode)
B. Plateform:
   - OS: CentOS release 6.10 (Final) x86_64
   - Hostname: hostingultrasoone.com
C. Services:
   1. MySQL: MariaDB-server-10.0.38-1.el6.x86_64
   2. PHP:
      - Installed:
        - Branch: php56w-cli-5.6.40-1.w6.x86_64
      - Used: --PHP Branch--
      - Multiple: disable
   3. Web Used: apache
     - Hiawatha: hiawatha-10.9.0-f.2.mr.el6.x86_64
     - Lighttpd: lighttpd-1.4.47-2.el6.x86_64
     - Nginx: nginx-1.19.4-1.el6.ngx.x86_64
     - Apache: httpd-2.2.31-1.mr.el6.x86_64
       - PHP Type: php-fpm_event
       - Secondary PHP: off
   4. WebCache: none
     - ATS: --uninstalled--
     - Squid: --uninstalled--
     - Varnish: --uninstalled--
   5. Dns: bind
     - Bind: bind-9.9.9-1.mr.el6.x86_64
     - DJBDns: djbdns-1.05-17.4.mr.el6.x86_64
     - NSD: nsd-4.2.2-1.el6.x86_64
     - PowerDNS: pdns-4.1.8-1.el6.MIND.x86_64
     - Yadifa: yadifa-2.2.5-1.mr.el6.x86_64
   6. Mail: qmail-toaster-1.03-1.3.57.mr.el6.x86_64
      - pop3/imap4: courier-imap-toaster-4.1.2-1.3.20.mr.el6.x86_64
      - smtp: qmail-toaster-1.03-1.3.57.mr.el6.x86_64
      - spam: bogofilter-1.2.4-1.el6.x86_64
   7. FTP: pure-ftpd
      - pure-ftpd: pure-ftpd-1.0.49-1.mr.el6.x86_64
   8. Stats: awstats
      - awstats: kloxomr-stats-awstats-7.7-1.mr.noarch
D. Memory:
             total       used       free     shared    buffers     cached
Mem:           490        394         95          0         17        221
-/+ buffers/cache:        156        333
Swap:          510         80        430
E. Disk Space:
Filesystem      Size  Used Avail Use% Mounted on
/dev/vda1       9.4G  2.8G  6.2G  31% /


*** Process Time: 00:00:00:26.26681 (dd:hh:mm:ss:xxxxxx) ***

* Note: run 'sh /script/sysinfo -y' if you want run 'fix-service-list' also
        (importance after Kloxo-MR update)

Loaded plugins: fastestmirror, presto, priorities, protectbase, replace
Loading mirror speeds from cached hostfile
mratwork-epel/metalink                                                                                                                                                |  16 kB     00:00
 * mratwork-epel: mirror.lax.genesisadaptive.com
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: us-east.repo.webtatic.com
 * mratwork-webtatic-testing: us-east.repo.webtatic.com
base                                                                                                                                                                  | 3.7 kB     00:00
extras                                                                                                                                                                | 3.4 kB     00:00
mratwork-google-mod-pagespeed                                                                                                                                         |  951 B     00:00
mratwork-ius                                                                                                                                                          | 1.3 kB     00:00
mratwork-ius-archive                                                                                                                                                  | 1.3 kB     00:00
mratwork-mariadb                                                                                                                                                      | 2.9 kB     00:00
mratwork-nginx                                                                                                                                                        | 2.9 kB     00:00
mratwork-nginx-stable                                                                                                                                                 | 2.9 kB     00:00
mratwork-release-neutral-noarch                                                                                                                                       | 1.3 kB     00:00
mratwork-release-version-arch                                                                                                                                         | 1.2 kB     00:00
mratwork-varnish                                                                                                                                                      | 1.0 kB     00:00
mratwork-webtatic                                                                                                                                                     | 3.6 kB     00:00
mratwork-webtatic-archive                                                                                                                                             | 2.9 kB     00:00
mratwork-webtatic-testing                                                                                                                                             | 2.9 kB     00:00
updates                                                                                                                                                               | 3.4 kB     00:00
0 packages excluded due to repository protections
Installed Packages
kloxomr-editor-ckeditor.noarch                                                          4.5.11-1.mr                                                          @mratwork-release-neutral-noarch
kloxomr-editor-fckeditor.noarch                                                         2.6.8-8.mr                                                           @mratwork-release-neutral-noarch
kloxomr-stats-awstats.noarch                                                            7.7-1.mr                                                             @mratwork-release-neutral-noarch
kloxomr-thirdparty-jcterm.noarch                                                        0.0.10-2.mr                                                          @mratwork-release-neutral-noarch
kloxomr-thirdparty-sshterm-applet.noarch                                                0.2.2-4.mr                                                           @mratwork-release-neutral-noarch
kloxomr-webmail-afterlogic.noarch                                                       7.7.9-1.mr                                                           @mratwork-release-neutral-noarch
kloxomr-webmail-afterlogic8.noarch                                                      8.3.2-1.mr                                                           @mratwork-release-neutral-noarch
kloxomr-webmail-rainloop.noarch                                                         1.12.1-1.mr                                                          @mratwork-release-neutral-noarch
kloxomr-webmail-roundcube.noarch                                                        1.3.9-1.mr                                                           @mratwork-release-neutral-noarch
kloxomr-webmail-squirrelmail.noarch                                                     1.4.22-6.mr                                                          @mratwork-release-neutral-noarch
kloxomr-webmail-telaen.noarch                                                           1.3.2-3.mr                                                           @mratwork-release-neutral-noarch
kloxomr7.noarch                                                                         7.0.0.c-2019070501.mr                                                @mratwork-release-neutral-noarch
kloxomr7-thirdparty-phpmyadmin.noarch                                                   4.9.0.1-1.mr                                                         @mratwork-release-neutral-noarch
[root@hostingultrasoone ~]#

2
Kloxo-MR Technical Helps / httpd restart failed
« on: 2020-11-24, 12:19:36 »
I have just installed Kloxo MR 7 in a new cloud server.

And given the command "service httpd restart". It is showing Failed to restart. Can you please write me how to solve this issue?

Code: [Select]
[root@hostingultrasoone ~]# service httpd restart
Stopping httpd:                                            [FAILED]
Starting httpd: Syntax error on line 43 of /etc/httpd/conf/httpd.conf:
Invalid command 'ErrorLogFormat', perhaps misspelled or defined by a module not included in the server configuration
                                                           [FAILED]

3
Kloxo-MR Technical Helps / Kloxo MR Installation failed
« on: 2018-09-01, 19:12:54 »
I have tried to install Kloxo MR on CentOS 6.7. But installation failed. Can you please check why?

Code: [Select]
login as: root
root@163.172.104.28's password:
Last login: Sat Sep  1 18:54:25 2018 from 47.15.187.142
[root@s1 ~]# yum update -y
Loaded plugins: fastestmirror, priorities, security
Setting up Update Process
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.freethought-internet.co.uk
 * mratwork-ius-stable: lon.mirror.rackspace.com
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: rep-centos-fr.upress.io
http://repo.varnish-cache.org/redhat/varnish-3.0/el6/x86_64/repodata/0e86f304b9f                                                                                                             8c0e214d431f95100ad4668e0ad9e-primary.xml.gz: [Errno 14] PYCURL ERROR 22 - "The                                                                                                              requested URL returned error: 410 repo"
Trying other mirror.
Error: failure: repodata/0e86f304b9f8c0e214d431f95100ad4668e0ad9e-primary.xml.gz                                                                                                              from mratwork-varnish-3.0: [Errno 256] No more mirrors to try.
[root@s1 ~]# yum install yum-utils yum-priorities vim-minimal subversion curl zi                                                                                                             p unzip -y
Loaded plugins: fastestmirror, priorities, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.freethought-internet.co.uk
 * mratwork-ius-stable: lon.mirror.rackspace.com
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: rep-centos-fr.upress.io
http://repo.varnish-cache.org/redhat/varnish-3.0/el6/x86_64/repodata/0e86f304b9f                                                                                                             8c0e214d431f95100ad4668e0ad9e-primary.xml.gz: [Errno 14] PYCURL ERROR 22 - "The                                                                                                              requested URL returned error: 410 repo"
Trying other mirror.
Error: failure: repodata/0e86f304b9f8c0e214d431f95100ad4668e0ad9e-primary.xml.gz                                                                                                              from mratwork-varnish-3.0: [Errno 256] No more mirrors to try.
[root@s1 ~]# yum install telnet wget -y
Loaded plugins: fastestmirror, priorities, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.freethought-internet.co.uk
 * mratwork-ius-stable: lon.mirror.rackspace.com
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: rep-centos-fr.upress.io
http://repo.varnish-cache.org/redhat/varnish-3.0/el6/x86_64/repodata/0e86f304b9f                                                                                                             8c0e214d431f95100ad4668e0ad9e-primary.xml.gz: [Errno 14] PYCURL ERROR 22 - "The                                                                                                              requested URL returned error: 410 repo"
Trying other mirror.
Error: failure: repodata/0e86f304b9f8c0e214d431f95100ad4668e0ad9e-primary.xml.gz                                                                                                              from mratwork-varnish-3.0: [Errno 256] No more mirrors to try.
[root@s1 ~]# cd /
[root@s1 /]# cd /tmp
[root@s1 tmp]# rm -f mratwork*
[root@s1 tmp]# rpm -ivh https://github.com/mustafaramadhan/rpms/raw/master/mratw                                                                                                             ork/release/neutral/noarch/mratwork-release-0.0.1-1.noarch.rpm
Retrieving https://github.com/mustafaramadhan/rpms/raw/master/mratwork/release/n                                                                                                             eutral/noarch/mratwork-release-0.0.1-1.noarch.rpm
Preparing...                ########################################### [100%]
        package mratwork-release-0.0.1-1.noarch is already installed
        file /etc/yum.repos.d/mratwork.repo from install of mratwork-release-0.0                                                                                                             .1-1.noarch conflicts with file from package mratwork-release-0.0.1-1.noarch
[root@s1 tmp]# cd /
[root@s1 /]# yum clean all
Loaded plugins: fastestmirror, priorities, security
Cleaning repos: base extras mratwork-epel mratwork-google-mod-pagespeed
              : mratwork-ius-archive mratwork-ius-stable mratwork-mariadb
              : mratwork-nginx mratwork-nginx-stable
              : mratwork-release-neutral-noarch mratwork-release-version-arch
              : mratwork-varnish-3.0 mratwork-webtatic updates
Cleaning up Everything
Cleaning up list of fastest mirrors
[root@s1 /]# yum update mratwork-* -y
Loaded plugins: fastestmirror, priorities, security
Setting up Update Process
Determining fastest mirrors
mratwork-epel/metalink                                   |  30 kB     00:00
 * base: centos.quelquesmots.fr
 * extras: centos.crazyfrogs.org
 * mratwork-epel: mir01.syntis.net
 * mratwork-ius-stable: lon.mirror.rackspace.com
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: centos.quelquesmots.fr
base                                                     | 3.7 kB     00:00
base/primary_db                                          | 4.7 MB     00:00
extras                                                   | 3.4 kB     00:00
extras/primary_db                                        |  25 kB     00:00
mratwork-epel                                            | 3.2 kB     00:00
mratwork-epel/primary                                    | 3.2 MB     00:00
mratwork-epel                                                       12521/12521
mratwork-google-mod-pagespeed                            |  951 B     00:00
mratwork-google-mod-pagespeed/primary                    | 2.4 kB     00:00
mratwork-google-mod-pagespeed                                             10/10
mratwork-ius-archive                                     | 2.4 kB     00:00
mratwork-ius-archive/primary_db                          | 4.6 MB     00:02
mratwork-ius-stable                                      | 2.3 kB     00:00
mratwork-ius-stable/primary_db                           | 301 kB     00:00
mratwork-mariadb                                         | 2.9 kB     00:00
mratwork-mariadb/primary_db                              |  50 kB     00:00
mratwork-nginx                                           | 2.9 kB     00:00
mratwork-nginx/primary_db                                | 123 kB     00:00
mratwork-nginx-stable                                    | 2.9 kB     00:00
mratwork-nginx-stable/primary_db                         |  37 kB     00:00
mratwork-release-neutral-noarch                          | 1.3 kB     00:00
mratwork-release-neutral-noarch/primary                  | 136 kB     00:00
mratwork-release-neutral-noarch                                         469/469
mratwork-release-version-arch                            | 1.2 kB     00:00
mratwork-release-version-arch/primary                    | 115 kB     00:00
mratwork-release-version-arch                                           322/322
mratwork-varnish-3.0                                     | 1.0 kB     00:00
http://repo.varnish-cache.org/redhat/varnish-3.0/el6/x86_64/repodata/0e86f304b9f                                                                                                             8c0e214d431f95100ad4668e0ad9e-primary.xml.gz: [Errno 14] PYCURL ERROR 22 - "The                                                                                                              requested URL returned error: 410 repo"
Trying other mirror.
http://repo.varnish-cache.org/redhat/varnish-3.0/el6/x86_64/repodata/0e86f304b9f                                                                                                             8c0e214d431f95100ad4668e0ad9e-primary.xml.gz: [Errno 14] PYCURL ERROR 22 - "The                                                                                                              requested URL returned error: 410 repo"
Trying other mirror.
Error: failure: repodata/0e86f304b9f8c0e214d431f95100ad4668e0ad9e-primary.xml.gz                                                                                                              from mratwork-varnish-3.0: [Errno 256] No more mirrors to try.
[root@s1 /]# yum install kloxomr -y
Loaded plugins: fastestmirror, priorities, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: centos.crazyfrogs.org
 * mratwork-epel: mir01.syntis.net
 * mratwork-ius-stable: lon.mirror.rackspace.com
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: centos.quelquesmots.fr
http://repo.varnish-cache.org/redhat/varnish-3.0/el6/x86_64/repodata/0e86f304b9f                                                                                                             8c0e214d431f95100ad4668e0ad9e-primary.xml.gz: [Errno 14] PYCURL ERROR 22 - "The                                                                                                              requested URL returned error: 410 repo"
Trying other mirror.
Error: failure: repodata/0e86f304b9f8c0e214d431f95100ad4668e0ad9e-primary.xml.gz                                                                                                              from mratwork-varnish-3.0: [Errno 256] No more mirrors to try.
[root@s1 /]# sh /script/upcp
sh: /script/upcp: No such file or directory
[root@s1 /]#

4
Kloxo-MR Technical Helps / Suddenly Website is not working
« on: 2018-09-01, 10:51:22 »
Suddenly Website domain is not working. The server is online, Kloxo MR is opening, Database is also opening. But the website domain is not working - http://ultracorporatepixel.com/

I have added a user Clients under admin in the Kloxo-MR panel and a domain name. After that, all the website hosted under this server is not working.

Can you please help me why and how to correct it?

Please see below for the server information -


Code: [Select]
A. Control Panel:
   - Kloxo-MR: 7.0.0.c-2017080103
   - Web: hiawatha-10.6.0-f.1.mr.el6.x86_64
   - PHP: php56s - 5.6.31-1.ius.centos6 (fpm mode)
B. Plateform:
   - OS: CentOS release 6.9 (Final) x86_64
   - Hostname: ultracorporatepixel.com
C. Services:
   1. MySQL: MariaDB-server-10.0.31-1.el6.x86_64
   2. PHP:
      - Installed:
        - Branch: php56u-cli-5.6.31-1.ius.centos6.x86_64
        - Multiple:
          * php54m - 5.4.45-1.ius.centos6
          * php55m - 5.5.38-1.ius.centos6
          * php56m - 5.6.31-1.ius.centos6
          * php70m - 7.0.21-1.ius.centos6
      - Used: php56m-fpm
      - Multiple: enable
   3. Web Used: apache
     - Hiawatha: hiawatha-10.6.0-f.1.mr.el6.x86_64
     - Lighttpd: lighttpd-1.4.45-1.el6.x86_64
     - Nginx: nginx-1.13.3-1.el6.ngx.x86_64
     - Apache: httpd24u-2.4.27-1.ius.centos6.x86_64
       - PHP Type: php-fpm_event
       - Secondary PHP: off
   4. WebCache: none
     - ATS: --uninstalled--
     - Squid: --uninstalled--
     - Varnish: --uninstalled--
   5. Dns: bind
     - Bind: bind-9.9.9-1.mr.el6.x86_64
     - DJBDns: djbdns-1.05-17.4.mr.el6.x86_64
     - NSD: nsd-4.1.16-1.el6.x86_64
     - PowerDNS: pdns-4.0.3-1.el6.MIND.x86_64
     - Yadifa: yadifa-2.2.3-1.mr.el6.x86_64
   6. Mail: qmail-toaster-1.03-1.3.57.mr.el6.x86_64
      - pop3/imap4: courier-imap-toaster-4.1.2-1.3.20.mr.el6.x86_64
      - smtp: qmail-toaster-1.03-1.3.57.mr.el6.x86_64
      - spam: bogofilter-1.2.4-1.el6.x86_64
   7. FTP: pure-ftpd
      - pure-ftpd: pure-ftpd-1.0.37-1.mr.el6.x86_64
   8. Stats: awstats
      - awstats: kloxomr-stats-awstats-7.6-1.mr.noarch
D. Memory:
             total       used       free     shared    buffers     cached
Mem:         64209       4106      60103          0        132       2384
-/+ buffers/cache:       1589      62620
Swap:        11999          0      11999
E. Disk Space:
Filesystem      Size  Used Avail Use% Mounted on
/dev/md1        930G   52G  831G   6% /


*** Process Time: 00:00:00:13.13579 (dd:hh:mm:ss:xxxxxx) ***

* Note: run 'sh /script/sysinfo -y' if you want run 'fix-service-list' also
        (importance after Kloxo-MR update)

Loaded plugins: fastestmirror, presto, priorities, protectbase, replace,
              : security
Determining fastest mirrors
mratwork-epel/metalink                                   |  28 kB     00:00


5
Kloxo-MR Technical Helps / Re: Name Server
« on: 2017-09-18, 12:23:43 »
Thanks. My main server IP is 163.172.104.28.
Can you please tell me is 212.129.18.64 has separate class-C network IP with 163.172.104.28?

6
Kloxo-MR Technical Helps / How to setup IP address
« on: 2017-09-16, 15:30:01 »
I have setup two name server which is ns1.ultracorporatepixel.com and ns2.ultracorporatepixel.com. But the problem is both name server is pointing to same IP.

So, how can I set up IP in the server so that both name server use separate IP?

I am using Kloxo-MR 7 panel.

7
Kloxo-MR Technical Helps / Name Server
« on: 2017-09-16, 07:50:24 »
I have purchase a German (.de) domain name from Godaddy.

It is asking to provide authoritative nameservers. And also "Each nameserver must be on a separate class-C network. That is, the first three octets cannot be the same. For example, 216.1.69.1 and 68.42.99.120 are valid".

https://in.godaddy.com/help/about-de-domains-5825#3

My name server is ns1.ultracorporatepixel.com, ns2.ultracorporatepixel.com.

So my question is -
Is my name server is authoritative nameservers?
And is it has separate class-C network?

How can I check this and create this?

I am using Kloxo-Mr panel.

8
Kloxo-MR Technical Helps / Install PHP mbstring extension
« on: 2017-08-04, 19:02:03 »
How to install PHP mbstring extension?

The system information is given below -

Code: [Select]
[root@s1 ~]# sh /script/sysinfo; yum list installed kloxo*
A. Control Panel:
   - Kloxo-MR: 7.0.0.c-2017071101
   - Web: hiawatha-10.6.0-f.1.mr.el6.x86_64
   - PHP: php56s - 5.6.30-2.ius.centos6 (fpm mode)
B. Plateform:
   - OS: CentOS release 6.9 (Final) x86_64
   - Hostname: s1.ultracorporatepixel.com
C. Services:
   1. MySQL: MariaDB-server-10.0.31-1.el6.x86_64
   2. PHP:
      - Installed:
        - Branch: php56u-cli-5.6.31-1.ius.centos6.x86_64
        - Multiple:
          * php54m - 5.4.45-1.ius.centos6
          * php55m - 5.5.38-1.ius.centos6
          * php56m - 5.6.30-2.ius.centos6
          * php70m - 7.0.17-1.ius.centos6
      - Used: --PHP Branch--
      - Multiple: enable
   3. Web Used: apache
     - Hiawatha: hiawatha-10.6.0-f.1.mr.el6.x86_64
     - Lighttpd: lighttpd-1.4.45-1.el6.x86_64
     - Nginx: nginx-1.13.3-1.el6.ngx.x86_64
     - Apache: httpd24u-2.4.27-1.ius.centos6.x86_64
       - PHP Type: php-fpm_event
       - Secondary PHP: off
   4. WebCache: none
     - ATS: --uninstalled--
     - Squid: --uninstalled--
     - Varnish: --uninstalled--
   5. Dns: bind
     - Bind: bind-9.9.9-1.mr.el6.x86_64
     - DJBDns: djbdns-1.05-17.4.mr.el6.x86_64
     - NSD: nsd-4.1.16-1.el6.x86_64
     - PowerDNS: pdns-4.0.3-1.el6.MIND.x86_64
     - Yadifa: yadifa-2.2.3-1.mr.el6.x86_64
   6. Mail: qmail-toaster-1.03-1.3.56.mr.el6.x86_64
      - pop3/imap4: courier-imap-toaster-4.1.2-1.3.20.mr.el6.x86_64
      - smtp: qmail-toaster-1.03-1.3.56.mr.el6.x86_64
      - spam: bogofilter-1.2.4-1.el6.x86_64
   7. FTP: pure-ftpd
      - pure-ftpd: pure-ftpd-1.0.37-1.mr.el6.x86_64
   8. Stats: awstats
      - awstats: kloxomr-stats-awstats-7.6-1.mr.noarch
D. Memory:
             total       used       free     shared    buffers     cached
Mem:         64209      15591      48618          1        514      12984
-/+ buffers/cache:       2091      62118
Swap:        11999          0      11999
E. Disk Space:
Filesystem      Size  Used Avail Use% Mounted on
/dev/md1        930G   26G  857G   3% /


*** Process Time: 00:00:00:13.13375 (dd:hh:mm:ss:xxxxxx) ***

* Note: run 'sh /script/sysinfo -y' if you want run 'fix-service-list' also
        (importance after Kloxo-MR update)

Loaded plugins: fastestmirror, presto, priorities, protectbase, replace, security
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: miroir.univ-paris13.fr
 * mratwork-epel: mirrors.ircam.fr
 * mratwork-ius-archive: mirrors.ircam.fr
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Installed Packages
kloxomr-editor-ckeditor.noarch                                               4.5.11-1.mr                                                @mratwork-release-neutral-noarch
kloxomr-editor-fckeditor.noarch                                              2.6.8-8.mr                                                 @mratwork-release-neutral-noarch
kloxomr-stats-awstats.noarch                                                 7.6-1.mr                                                   @mratwork-release-neutral-noarch
kloxomr-thirdparty-jcterm.noarch                                             0.0.10-2.mr                                                @mratwork-release-neutral-noarch
kloxomr-thirdparty-sshterm-applet.noarch                                     0.2.2-4.mr                                                 @mratwork-release-neutral-noarch
kloxomr-webmail-afterlogic.noarch                                            7.7.2-1.mr                                                 @mratwork-release-neutral-noarch
kloxomr-webmail-rainloop.noarch                                              1.11.0.203-1.mr                                            @mratwork-release-neutral-noarch
kloxomr-webmail-roundcube.noarch                                             1.2.5-1.mr                                                 @mratwork-release-neutral-noarch
kloxomr-webmail-squirrelmail.noarch                                          1.4.22-6.mr                                                @mratwork-release-neutral-noarch
kloxomr-webmail-telaen.noarch                                                1.3.2-3.mr                                                 @mratwork-release-neutral-noarch
kloxomr7.noarch                                                              7.0.0.c-2017071101.mr                                      @mratwork-release-neutral-noarch
kloxomr7-thirdparty-phpmyadmin.noarch                                        4.6.6-1.mr                                                 @mratwork-release-neutral-noarch


9
Kloxo-MR Technical Helps / GD library
« on: 2017-07-27, 13:15:43 »
How to install GD library? I am using Drupal and it requires 'GD' library. I have given a command to install 'GD' Library but it shows error.

Code: [Select]
[root@s1 ~]# yum install php-gd
Loaded plugins: fastestmirror, presto, priorities, protectbase, replace, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: miroir.univ-paris13.fr
 * mratwork-epel: mirrors.ircam.fr
 * mratwork-ius-archive: mirrors.ircam.fr
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Resolving Dependencies
--> Running transaction check
---> Package php-gd.x86_64 0:5.3.3-49.el6 will be installed
--> Processing Dependency: php-common(x86-64) = 5.3.3-49.el6 for package: php-gd-5.3.3-49.el6.x86_64
--> Running transaction check
---> Package php-common.x86_64 0:5.3.3-49.el6 will be installed
--> Processing Conflict: php56u-common-5.6.31-1.ius.centos6.x86_64 conflicts php-common < 5.6
--> Finished Dependency Resolution
Error: php56u-common conflicts with php-common-5.3.3-49.el6.x86_64
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

The system information is given below -

Code: [Select]
[root@s1 ~]# sh /script/sysinfo; yum list installed kloxo*
A. Control Panel:
   - Kloxo-MR: 7.0.0.c-2017071101
   - Web: hiawatha-10.6.0-f.1.mr.el6.x86_64
   - PHP: php56s - 5.6.30-2.ius.centos6 (fpm mode)
B. Plateform:
   - OS: CentOS release 6.9 (Final) x86_64
   - Hostname: s1.ultracorporatepixel.com
C. Services:
   1. MySQL: MariaDB-server-10.0.31-1.el6.x86_64
   2. PHP:
      - Installed:
        - Branch: php56u-cli-5.6.31-1.ius.centos6.x86_64
        - Multiple:
          * php54m - 5.4.45-1.ius.centos6
          * php55m - 5.5.38-1.ius.centos6
          * php56m - 5.6.30-2.ius.centos6
          * php70m - 7.0.17-1.ius.centos6
      - Used: --PHP Branch--
      - Multiple: enable
   3. Web Used: apache
     - Hiawatha: hiawatha-10.6.0-f.1.mr.el6.x86_64
     - Lighttpd: lighttpd-1.4.45-1.el6.x86_64
     - Nginx: nginx-1.13.3-1.el6.ngx.x86_64
     - Apache: httpd24u-2.4.27-1.ius.centos6.x86_64
       - PHP Type: php-fpm_event
       - Secondary PHP: off
   4. WebCache: none
     - ATS: --uninstalled--
     - Squid: --uninstalled--
     - Varnish: --uninstalled--
   5. Dns: bind
     - Bind: bind-9.9.9-1.mr.el6.x86_64
     - DJBDns: djbdns-1.05-17.4.mr.el6.x86_64
     - NSD: nsd-4.1.16-1.el6.x86_64
     - PowerDNS: pdns-4.0.3-1.el6.MIND.x86_64
     - Yadifa: yadifa-2.2.3-1.mr.el6.x86_64
   6. Mail: qmail-toaster-1.03-1.3.56.mr.el6.x86_64
      - pop3/imap4: courier-imap-toaster-4.1.2-1.3.20.mr.el6.x86_64
      - smtp: qmail-toaster-1.03-1.3.56.mr.el6.x86_64
      - spam: bogofilter-1.2.4-1.el6.x86_64
   7. FTP: pure-ftpd
      - pure-ftpd: pure-ftpd-1.0.37-1.mr.el6.x86_64
   8. Stats: awstats
      - awstats: kloxomr-stats-awstats-7.6-1.mr.noarch
D. Memory:
             total       used       free     shared    buffers     cached
Mem:         64209      15591      48618          1        514      12984
-/+ buffers/cache:       2091      62118
Swap:        11999          0      11999
E. Disk Space:
Filesystem      Size  Used Avail Use% Mounted on
/dev/md1        930G   26G  857G   3% /


*** Process Time: 00:00:00:13.13375 (dd:hh:mm:ss:xxxxxx) ***

* Note: run 'sh /script/sysinfo -y' if you want run 'fix-service-list' also
        (importance after Kloxo-MR update)

Loaded plugins: fastestmirror, presto, priorities, protectbase, replace, security
Loading mirror speeds from cached hostfile
 * base: centos.quelquesmots.fr
 * extras: miroir.univ-paris13.fr
 * mratwork-epel: mirrors.ircam.fr
 * mratwork-ius-archive: mirrors.ircam.fr
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Installed Packages
kloxomr-editor-ckeditor.noarch                                               4.5.11-1.mr                                                @mratwork-release-neutral-noarch
kloxomr-editor-fckeditor.noarch                                              2.6.8-8.mr                                                 @mratwork-release-neutral-noarch
kloxomr-stats-awstats.noarch                                                 7.6-1.mr                                                   @mratwork-release-neutral-noarch
kloxomr-thirdparty-jcterm.noarch                                             0.0.10-2.mr                                                @mratwork-release-neutral-noarch
kloxomr-thirdparty-sshterm-applet.noarch                                     0.2.2-4.mr                                                 @mratwork-release-neutral-noarch
kloxomr-webmail-afterlogic.noarch                                            7.7.2-1.mr                                                 @mratwork-release-neutral-noarch
kloxomr-webmail-rainloop.noarch                                              1.11.0.203-1.mr                                            @mratwork-release-neutral-noarch
kloxomr-webmail-roundcube.noarch                                             1.2.5-1.mr                                                 @mratwork-release-neutral-noarch
kloxomr-webmail-squirrelmail.noarch                                          1.4.22-6.mr                                                @mratwork-release-neutral-noarch
kloxomr-webmail-telaen.noarch                                                1.3.2-3.mr                                                 @mratwork-release-neutral-noarch
kloxomr7.noarch                                                              7.0.0.c-2017071101.mr                                      @mratwork-release-neutral-noarch
kloxomr7-thirdparty-phpmyadmin.noarch                                        4.6.6-1.mr                                                 @mratwork-release-neutral-noarch

Please help.

10
Kloxo-MR Tips and Tricks / Re: Server infected with Virus
« on: 2017-07-21, 06:52:11 »
I have install ClamAV and run the command to find only infected files. Below I have found these files.

Code: [Select]
[root@s1 ~]# clamscan -r --bell -i /
/maldet-clean.tgz: {HEX}gzbase64.inject.unclassed.15.UNOFFICIAL FOUND
/maldet-sigpack.tgz: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/99d66/pyuim.zip: {HEX}php.exe.globals.406.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/99d66/alopr/new.php: {HEX}php.exe.globals.406.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/install.php: {HEX}php.generic.malware.441.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/modules/rdf/javascript.php: {HEX}php.generic.malware.440.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/modules/aggregator/aggregator-item.tpl.php: {HEX}php.generic.malware.441.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/modules/search/search-result.tpl.php: {HEX}php.generic.malware.441.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/modules/field/modules/text/xml.php: {HEX}php.base64.v23au.186.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/modules/field/modules/field_sql_storage/help22.php: {HEX}php.generic.malware.440.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/427a/pyuim.zip: {HEX}php.exe.globals.406.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/427a/alopr/new.php: {HEX}php.exe.globals.406.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/themes/acquia/sonoma/images/inc23.php: {HEX}php.generic.malware.440.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/themes/acquia/kenwood/forum-list.tpl.php: {HEX}php.generic.malware.441.UNOFFICIAL FOUND
/home/abrahamheinemann12/rainbow-trust/themes/acquia/sparks/node.tpl.php: {HEX}php.generic.malware.441.UNOFFICIAL FOUND
/home/lxadmin/mail/domains/hostingultraso.com/sales/Maildir/cur/1494692636.M528884P1895V0000000000000901I0000000000EC0732_0.s1.ultracorporatepixel.com,S=3075:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/sales/Maildir/cur/1494716999.M463319P9467V0000000000000901I0000000000EC0743_0.s1.ultracorporatepixel.com,S=2936:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/sales/Maildir/cur/1494640444.M807937P16499V0000000000000901I0000000000EC0725_0.s1.ultracorporatepixel.com,S=3144:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/sales/Maildir/cur/1494543767.M906155P17385V0000000000000901I0000000000EC06F2_0.s1.ultracorporatepixel.com,S=3011:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/sales/Maildir/cur/1494729613.M730256P20264V0000000000000901I0000000000EC074F_0.s1.ultracorporatepixel.com,S=2994:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/abuse/Maildir/new/1494693503.M87221P2421V0000000000000901I0000000000EC0735_0.s1.ultracorporatepixel.com,S=2958: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/abuse/Maildir/new/1494732271.M391746P23169V0000000000000901I0000000000EC0751_0.s1.ultracorporatepixel.com,S=3026: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/abuse/Maildir/new/1494641343.M515975P17018V0000000000000901I0000000000EC0728_0.s1.ultracorporatepixel.com,S=2935: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/abuse/Maildir/new/1494717711.M179728P10111V0000000000000901I0000000000EC0745_0.s1.ultracorporatepixel.com,S=2984: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/abuse/Maildir/new/1500150780.M128569P26240V0000000000000901I0000000000EC0FA3_0.s1.ultracorporatepixel.com,S=238690: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/billing/Maildir/new/1494692004.M93618P1524V0000000000000901I0000000000EC0730_0.s1.ultracorporatepixel.com,S=3151: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/billing/Maildir/new/1494543140.M599919P17065V0000000000000901I0000000000EC06EF_0.s1.ultracorporatepixel.com,S=2911: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/billing/Maildir/new/1494639664.M84673P16217V0000000000000901I0000000000EC0723_0.s1.ultracorporatepixel.com,S=3029: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/billing/Maildir/new/1494727636.M908834P18865V0000000000000901I0000000000EC074B_0.s1.ultracorporatepixel.com,S=2909: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/billing/Maildir/new/1494716262.M742018P9205V0000000000000901I0000000000EC0741_0.s1.ultracorporatepixel.com,S=2991: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/billing/Maildir/new/1500363452.M703766P10412V0000000000000901I0000000000EC0FD8_0.s1.ultracorporatepixel.com,S=236001: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/support/Maildir/new/1494693796.M10821P2637V0000000000000901I0000000000EC0737_0.s1.ultracorporatepixel.com,S=3016: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/support/Maildir/new/1498304246.M863445P14946V0000000000000901I0000000000EC0D73_0.s1.ultracorporatepixel.com,S=390801: Doc.Macro.Obfuscation-6331107-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/support/Maildir/new/1494545085.M120035P17801V0000000000000901I0000000000EC06F4_0.s1.ultracorporatepixel.com,S=3023: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/support/Maildir/new/1494641593.M580073P17176V0000000000000901I0000000000EC072A_0.s1.ultracorporatepixel.com,S=3049: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/datacenter/Maildir/cur/1494717937.M417747P10316V0000000000000901I0000000000EC0747_0.s1.ultracorporatepixel.com,S=2864:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/datacenter/Maildir/cur/1494418388.M372813P25518V0000000000000901I0000000000EC0696_0.s1.ultracorporatepixel.com,S=41209:2,: Heuristics.Phishing.Email.SpoofedDomain FOUND
/home/lxadmin/mail/domains/hostingultraso.com/datacenter/Maildir/cur/1494072881.M103326P18118V0000000000000901I0000000000EC067B_0.s1.ultracorporatepixel.com,S=58251:2,: Heuristics.Phishing.Email.SpoofedDomain FOUND
/home/lxadmin/mail/domains/hostingultraso.com/datacenter/Maildir/cur/1494545118.M720915P17930V0000000000000901I0000000000EC06F6_0.s1.ultracorporatepixel.com,S=3017:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/datacenter/Maildir/cur/1494732955.M716858P23619V0000000000000901I0000000000EC0753_0.s1.ultracorporatepixel.com,S=2979:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/datacenter/Maildir/new/1500507152.M368702P30302V0000000000000901I0000000000EC1000_0.s1.ultracorporatepixel.com,S=243719: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494388984.M228082P13300V0000000000000901I0000000000EC0694_0.s1.ultracorporatepixel.com,S=186954:2,S: Doc.Macro.Obfuscation-6329909-1 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1496316679.M805018P10559V0000000000000901I0000000000EC0A35_0.s1.ultracorporatepixel.com,S=1827:2,: Eicar-Test-Signature FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494693503.M161191P2432V0000000000000901I0000000000EC0736_0.s1.ultracorporatepixel.com,S=3070:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494692812.M431907P2073V0000000000000901I0000000000EC0734_0.s1.ultracorporatepixel.com,S=3036:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494727637.M21766P18876V0000000000000901I0000000000EC074C_0.s1.ultracorporatepixel.com,S=3022:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494716262.M809291P9216V0000000000000901I0000000000EC0742_0.s1.ultracorporatepixel.com,S=3103:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1500150780.M180942P26247V0000000000000901I0000000000EC0FA4_0.s1.ultracorporatepixel.com,S=238803:2,: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494641593.M650810P17187V0000000000000901I0000000000EC072B_0.s1.ultracorporatepixel.com,S=3162:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494641343.M582624P17029V0000000000000901I0000000000EC0729_0.s1.ultracorporatepixel.com,S=3048:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494716999.M531597P9478V0000000000000901I0000000000EC0744_0.s1.ultracorporatepixel.com,S=3048:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494732955.M786678P23630V0000000000000901I0000000000EC0754_0.s1.ultracorporatepixel.com,S=3092:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1498304246.M918966P14953V0000000000000901I0000000000EC0D74_0.s1.ultracorporatepixel.com,S=390914:2,: Doc.Macro.Obfuscation-6331107-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494692004.M166392P1535V0000000000000901I0000000000EC0731_0.s1.ultracorporatepixel.com,S=3263:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494732271.M465730P23180V0000000000000901I0000000000EC0752_0.s1.ultracorporatepixel.com,S=3139:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494717937.M487424P10327V0000000000000901I0000000000EC0748_0.s1.ultracorporatepixel.com,S=2977:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494717711.M249708P10122V0000000000000901I0000000000EC0746_0.s1.ultracorporatepixel.com,S=3097:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494543140.M672273P17076V0000000000000901I0000000000EC06F0_0.s1.ultracorporatepixel.com,S=3024:2,S: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494545118.M792128P17941V0000000000000901I0000000000EC06F7_0.s1.ultracorporatepixel.com,S=3130:2,S: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494640606.M669613P16646V0000000000000901I0000000000EC0727_0.s1.ultracorporatepixel.com,S=3063:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1500292461.M535880P20626V0000000000000901I0000000000EC0FC1_0.s1.ultracorporatepixel.com,S=242953:2,: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494692636.M598024P1906V0000000000000901I0000000000EC0733_0.s1.ultracorporatepixel.com,S=3187:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494640444.M873872P16510V0000000000000901I0000000000EC0726_0.s1.ultracorporatepixel.com,S=3257:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1500507152.M446274P30309V0000000000000901I0000000000EC1001_0.s1.ultracorporatepixel.com,S=243832:2,: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494639664.M155073P16228V0000000000000901I0000000000EC0724_0.s1.ultracorporatepixel.com,S=3142:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494729613.M796607P20275V0000000000000901I0000000000EC0750_0.s1.ultracorporatepixel.com,S=3107:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1500363452.M755031P10419V0000000000000901I0000000000EC0FD9_0.s1.ultracorporatepixel.com,S=236114:2,: Doc.Macro.Obfuscation-6332451-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494693796.M87410P2648V0000000000000901I0000000000EC0738_0.s1.ultracorporatepixel.com,S=3128:2,: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494543767.M975377P17396V0000000000000901I0000000000EC06F3_0.s1.ultracorporatepixel.com,S=3124:2,S: Email.Phishing.VOF2-6314030-0 FOUND
/home/lxadmin/mail/domains/hostingultraso.com/contact/Maildir/cur/1494545085.M188037P17812V0000000000000901I0000000000EC06F5_0.s1.ultracorporatepixel.com,S=3136:2,S: Email.Phishing.VOF2-6314030-0 FOUND
/sigs/rfxn.yara: {HEX}gzbase64.inject.unclassed.15.UNOFFICIAL FOUND
/sigs/md5v2.dat: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/sigs/md5.dat: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/sigs/rfxn.ndb: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/sigs/rfxn.hdb: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/sigs/hex.dat: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/var/lib/clamav/rfxn.yara: {HEX}gzbase64.inject.unclassed.15.UNOFFICIAL FOUND
/var/lib/clamav/rfxn.ndb: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND
/var/lib/clamav/rfxn.hdb: YARA.Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php.UNOFFICIAL FOUND

What should I do now? It seems that most of the emails are effected?

11
Kloxo-MR Tips and Tricks / Re: Server infected with Virus
« on: 2017-07-20, 19:36:12 »
I have installed ClamAV and scanned the server files. The summary is listed below -

----------- SCAN SUMMARY -----------
Known viruses: 6301436
Engine version: 0.99.2
Scanned directories: 71990
Scanned files: 407195
Infected files: 63
Total errors: 11362
Data scanned: 27797.09 MB
Data read: 26115.20 MB (ratio 1.06:1)
Time: 867.887 sec (14 m 27 s)

It is showing infected files are 63 and errors 11362. So, how should I now only see infected files and remove it?

12
Kloxo-MR Tips and Tricks / Re: Server infected with Virus
« on: 2017-07-20, 19:13:16 »
Check old maillog also.

From where it is possible to check old maillog?

13
Kloxo-MR Tips and Tricks / Re: Server infected with Virus
« on: 2017-07-20, 18:05:11 »
Quote
Check to php/php-fpm and maillog log in 'log manager'. Also check 'mail queue'.

In php-fpm in 'log manager', I have found in /var/log/php-fpm/slow.log -

Code: [Select]
[16-Jul-2017 04:00:37]  [pool php-hostingultraso123] pid 29263
script_filename = /home/hostingultraso123/hostingultraso/cron.php
[0x00007f535c664f10] usleep() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f535c660c50] httprl_send_request() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007fffea778880] boost_crawler_run() unknown:0
[0x00007f535c6609a0] call_user_func() /home/hostingultraso123/hostingultraso/includes/common.inc:5444
[0x00007f535c65ffb0] drupal_cron_run() /home/hostingultraso123/hostingultraso/cron.php:25

[17-Jul-2017 04:00:35]  [pool php-hostingultraso123] pid 4437
script_filename = /home/hostingultraso123/hostingultraso/cron.php
[0x00007f7b81ecff10] usleep() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f7b81ecbc50] httprl_send_request() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007ffcf05b72b0] boost_crawler_run() unknown:0
[0x00007f7b81ecb9a0] call_user_func() /home/hostingultraso123/hostingultraso/includes/common.inc:5444
[0x00007f7b81ecafb0] drupal_cron_run() /home/hostingultraso123/hostingultraso/cron.php:25

[17-Jul-2017 05:00:36]  [pool php-hostingultraso123] pid 5870
script_filename = /home/hostingultraso123/hostingultraso-support/cron.php
[0x00007f7b81ecff08] usleep() /home/hostingultraso123/hostingultraso-support/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f7b81ecbc48] httprl_send_request() /home/hostingultraso123/hostingultraso-support/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007ffcf05b72b0] boost_crawler_run() unknown:0
[0x00007f7b81ecb998] call_user_func() /home/hostingultraso123/hostingultraso-support/includes/common.inc:5444
[0x00007f7b81ecafa8] drupal_cron_run() /home/hostingultraso123/hostingultraso-support/cron.php:25

[18-Jul-2017 04:00:37]  [pool php-hostingultraso123] pid 31110
script_filename = /home/hostingultraso123/hostingultraso/cron.php
[0x00007f7bd668bef0] usleep() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f7bd6687c30] httprl_send_request() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007ffc7ab49040] boost_crawler_run() unknown:0
[0x00007f7bd6687980] call_user_func() /home/hostingultraso123/hostingultraso/includes/common.inc:5444
[0x00007f7bd6686f90] drupal_cron_run() /home/hostingultraso123/hostingultraso/cron.php:25

[19-Jul-2017 04:00:38]  [pool php-hostingultraso123] pid 647
script_filename = /home/hostingultraso123/hostingultraso/cron.php
[0x00007f8a5c875f10] usleep() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f8a5c871c50] httprl_send_request() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007ffe1b725630] boost_crawler_run() unknown:0
[0x00007f8a5c8719a0] call_user_func() /home/hostingultraso123/hostingultraso/includes/common.inc:5444
[0x00007f8a5c870fb0] drupal_cron_run() /home/hostingultraso123/hostingultraso/cron.php:25

[20-Jul-2017 04:00:32]  [pool php-hostingultraso123] pid 28649
script_filename = /home/hostingultraso123/hostingultraso/cron.php
[0x00007f6ca6e5cf10] usleep() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f6ca6e58c50] httprl_send_request() /home/hostingultraso123/hostingultraso/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007ffc41f22f70] boost_crawler_run() unknown:0
[0x00007f6ca6e589a0] call_user_func() /home/hostingultraso123/hostingultraso/includes/common.inc:5444
[0x00007f6ca6e57fb0] drupal_cron_run() /home/hostingultraso123/hostingultraso/cron.php:25

[20-Jul-2017 05:00:33]  [pool php-hostingultraso123] pid 30073
script_filename = /home/hostingultraso123/hostingultraso-support/cron.php
[0x00007f6ca6e5cf08] usleep() /home/hostingultraso123/hostingultraso-support/sites/all/modules/contrib/httprl/httprl.module:1606
[0x00007f6ca6e58c48] httprl_send_request() /home/hostingultraso123/hostingultraso-support/sites/all/modules/contrib/boost/boost_crawler/boost_crawler.module:72
[0x00007ffc41f22f70] boost_crawler_run() unknown:0
[0x00007f6ca6e58998] call_user_func() /home/hostingultraso123/hostingultraso-support/includes/common.inc:5444
[0x00007f6ca6e57fa8] drupal_cron_run() /home/hostingultraso123/hostingultraso-support/cron.php:25

In maillog in 'log manage', have not found any files.

In 'mail queue', 3 emails are in the queue and it has not been delivered till now.

Will I install ClamAV anti virus on this server (CentOS 6.9)? If install and scan the server will it solve the problem?


14
Kloxo-MR Tips and Tricks / Server infected with Virus
« on: 2017-07-20, 17:07:09 »
My server IP and domain name got blacklisted in spamhaus - https://www.spamhaus.org/query/ip/163.172.104.28
https://www.spamhaus.org/query/domain/hostingultraso.com

I have not sent any bulk email. But it has got black listed.

So, is this server has infected with Virus or Malware that is operating a Botnet? How can I check this?


15
Kloxo-MR Technical Helps / Re: DNS temporary failure
« on: 2017-06-20, 07:09:20 »
Try to change to:
Code: [Select]
# Generated by NetworkManager
#search ultracorporatepixel.com
#nameserver 62.210.16.6
nameserver 8.8.8.8
nameserver 8.8.4.4

I have changed it. How do I check now it is working or not?

Pages: [1] 2 3 ... 12

Top 4 Global Search Engines:    Google    Bing    Baidu    Yahoo

Page created in 0.033 seconds with 20 queries.

web stats analysis