Topics

1

Kloxo-MR Technical Helps / MySQL is crashed -- please help fix it

« on: 2014-10-08, 19:10:43 »

MySQL is crashed and I'm getting "error connecting to database" on website. I'm unable to login to Kloxo-MR. Please help me fix this. I tried running command on http://forum.mratwork.com/kloxo-mr-technical-helps/i-cannot-acces-kloxo-mr-panel/msg28086/#msg28086 but mysql still crashed.

A. Kloxo-MR: 6.5.0.f-2014040701

B. OS: CentOS release 6.5 (Final) x86_64

C. Apps:
   1. MySQL: mysql-5.5.34-1.el6.x86_64
   2. PHP: php53u-5.3.28-2.ius.el6.x86_64
   3. Httpd: httpd-2.2.29-1.mr.el6.x86_64
   4. Lighttpd: --uninstalled--
   5. Nginx: --uninstalled--
   6. Qmail: qmail-toaster-1.03-1.3.38.mr.el6.x86_64
      - with: courier-imap-toaster-4.1.2-1.3.16.mr.el6.x86_64
   7. Dns: bind-9.9.5-1.el6.x86_64

D. Php-type (for Httpd/proxy):

E. Memory:
                total       used       free     shared    buffers     cached
   Mem:          4096       1111       2984          0          0        605
   -/+ buffers/cache:        505       3590
   Swap:         1024          1       1022

2

Kloxo-MR Releases / Latest stable Kloxo-MR release?

« on: 2014-09-07, 23:28:13 »

What is the latest and most stable Kloxo-MR release? I currently have Kloxo-MR 6.5.0.f-2014040701 installed.

Awaiting a reply

3

Kloxo-MR Technical Helps / email account not showing Alert: forward_with_same_id_exists [info@mysite.com]

« on: 2014-04-29, 06:23:44 »

I created several email addresses for my website. However, one of the emails isn't displaying in the list of mail accounts. I keep getting the following error when I try to add it so that it appears in the list:

Press Esc to close    
Alert: forward_with_same_id_exists [info@mysite.com]

FYI: I looked in forward emails for the email address but there is none. The email exists somewhere in KloxoMR database but not in the mail accounts list.

What command do I run to fix this problem?

4

Kloxo-MR Technical Helps / Qmail not receiving mail

« on: 2014-03-20, 03:10:20 »

I think the qmail incoming mail problem is related to the courier-imap-toaster NOT being installed with qmail. 

I'm reading http://forum.lxcenter.org/index.php?t=msg&th=15419&goto=79912&#msg_79912
and it clearly states that to solve incoming mail problems, you need to have courier-imap-toaster installed. Kloxo-MR installation instructions stated that "(in progress: change from courier-imap to dovecot as imap/pop3)

For incoming mail problem:
(1). make sure "courier-imap" as active (green button) in "admin > servers > localhost > services"
(2). make sure all your domains and subdomains listing in file "/var/qmail/control/rcpthosts"
(3). restart "courier-imap" after update rcpthosts file

Kloxo-MR: latest version
OS: CentOS release 6
Services: see attached
Php-type: php-fpm_event

Could someone share the direct download link for courier-imap-toaster?
I have no idea why it wasn't included in the Kloxo-MR installation package.

5

Kloxo-MR Technical Helps / Suggestions for securing vps welcome

« on: 2014-03-12, 04:40:29 »

I have a Centos 6 vps with Nginx and Kloxo-MR installed.

I'm doing lots of research to harden my vps from hacker attacks and ddos attacks.

Right now, I have CSF Firewall installed and I'll install rkhunter. Since chkrootkit is similar to rkhunter, I want only rkhunter installed.   

Still, since I've experienced malicious hacker attacks, I'm diligently looking to find the best solutions to prevent another attack.

FYI: The malicious hacker used Wordpress vulnerabilities documented on this forum so I installed Bruteprotect Wordfence and BWS.

For hardening the vps, I've been reading about https://www.rfxn.com/projects/brute-force-detection/ and OSSEC and OpenVAS. OSSEC is a detection tool and OpenVAS is a vulnerability management tool. I'm leaning toward BFD.

I want to avoid installing redundant security tools and too many tools that may overwhelm the vps or cause incompatibility with Nginx and Kloxo-MR which did occur. 

Please share your suggestions on how you secure your vps and what you think about the above security tools.

6

Kloxo-MR Technical Helps / Installed server management tools preventing Nginx and Kloxo-MR from working

« on: 2014-03-02, 15:53:59 »

I had Nginx and Kloxo-MR were installed on Centos 6 vps and they worked fine but then the web host installed the server management tools at http://www.webhostingtalk.com/showthread.php?p=8986781&highlight=install+rootkit#post8986781 and since then Nginx and Kloxo-MR not working. Kloxo-MR was removed from the vps.

A server administrator just told me that "It's seems that you have installed too many web service softwares. Kloxo prefers httpd (apache) for running. Do you want me to remove all other web service manager? Or can you please re-install the operating system in the VPS -- if you don't have any problem." He did more trouble shooting and discovered that "the web service is too much for Kloxo-mr. Kloxo-mr is confused in using any one of them in installation -- apache, nginx and one other web server I don't know the name is installed. Kloxo-mr is taking that web server ( I don't know the name) as installation. And that's why it's not running. The apache server access is not working What do I do now?"

There is an incompatibility problem caused by one or some of the server management tools that tech support installed. The problem is not Nginx but with an unknown webserver preventing Nginx from working correctly on the vps. I told this to tech support.

FYI: The server management tools cannot be removed because they harden the vps  and protect the vps from hacking and ddos. However, I asked tech support for the name of the web server that's (and server management tools using it) is causing the incompatibility with Nginx but they haven't gotten back to me yet. I will have to delete that unknown web server and tools using it.

Question#1: How can I get Nginx and Kloxo-MR working on this vps with the installed server management tools? I want to use Nginx and Kloxo-MR and not Apache which tends to crash with Kloxo-MR.

Question#2: Will I have to use Nginx-proxy to get Kloxo-MR working on this vps with the installed server management tools? I was reading http://forum.mratwork.com/kloxo-mr-technical-helps/nginx-front-apache-backend-configuration-steps/. What is the best configuration to get Nginx and Kloxo-MR working on the vps?

Question#3: If the operating system is reinstalled, will Nginx and Kloxo-MR work?

Question#4: If the operating system is reinstalled on the vps, will that delete the server management tools?

Awaiting help

7

Kloxo-MR Technical Helps / help change Hiawatha homepage to domain File Manager homepage

« on: 2014-02-22, 22:45:09 »

I have a domain name under admin account (not under reseller account or customer account).

The homepage for this domain name show the Hiawatha server webpage (see screenshot below).

How do I change the Hiawatha homepage to another html file in the domain File Manager? There is a Kloxo-MR html page in the domain File Manager but that page doesn't display as the homepage, only the Hiawatha page does.

8

Kloxo-MR Technical Helps / Alert: could_not_ add_mail error when trying to add domain name

« on: 2014-02-22, 22:20:16 »

I keep getting the following error in admin > Home (reseller) > Home (tester) when trying to add a domain name:

Alert: could_not_ add_mail

Could someone help me add fix the mail problem so that I can add a domain name?

Here's a screenshot of the error.



And below is a screenshot of the icons showing for Home (tester) when trying to add a domain

9

Kloxo-MR Technical Helps / help changing default ssh port 22

« on: 2014-02-22, 22:03:53 »

I'd like help changing the default ssh listening port 22 to something that is more difficult to find. For example, I'd like to change it to 10000 or some other number.

Can I change the ssh port 22 in admin > Security > SSH Config  from 22 to 129 or 1003 or higher?
Or do I need to use ssh command to change ssh port 22 to 129 or 1003 or higher?

This is the message I get for SSH Config in admin > Security

10

Kloxo-MR Bugs and Requests / Edited files in File Manager changes to "root"

« on: 2014-01-26, 17:53:27 »

I have the latest release of Kloxo-MR installed.

I noticed that whenever any file edited in File Manager, the ownership changes to 'root'.

For example, I edited the wp-config.php file and the ownership changed to 'root' user.

See attached image.

11

Kloxo-MR Technical Helps / php.ini file path to disable php functions for security

« on: 2014-01-26, 05:26:22 »

Disable php functions for security

I read the 2 articles below about dangerous php functions and how to disable them.

http://stackoverflow.com/questions/1865020/php-how-to-disable-dangerous-functions
http://www.cyberciti.biz/faq/linux-unix-apache-lighttpd-phpini-disable-functions/

Could someone tell me which php.ini file I need to add the following code to inside Kloxo-MR?

Here's the code I want to add to the correct php.ini file:

Code: [Select]

disable_functions =exec,passthru,shell_exec,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source

Code: [Select]

allow_url_fopen=Off
allow_url_include=Off
FYI: I have a php.ini file that shared hosting provider added to the root folder of my Wordpress but I doubt this is the correct location in Kloxo-MR. The web hosted added the wrong code to the php.ini and I only noticed it today.

Thanks

12

Kloxo-MR Technical Helps / Wmail not working

« on: 2014-01-26, 05:04:35 »

My wmail hasn't worked since my vps had a ddos attack and sites were hacked. The malicious hacker gained direct access to the server files and wp-config.php file was BLANK, hence the white screen of death on the site.

Is there a code I can run to repair wmail so that I can login? I'm unable to login to any of my email accounts using wmail (or squirrel mail or other mail clients on server). 

13

Kloxo-MR Technical Helps / Learning about PHP-FPM and Nginx

« on: 2014-01-04, 21:56:38 »

I'm learning about PHP-FPM at http://www.php.net/manual/en/install.fpm.php and http://php-fpm.org/.

I have 10 sites on an Nginx server with Kloxo-MR.

Mratwork pm'd me stating that "Because client number is high for 1GB RAM, I change php-fpm allocation for each client (see custom file inside /home/php-fpm/tpl)."

I said that on a couple sites on the vps will be using the majority of RAM since the other sites don't get any traffic.  I want the PHP-FPM allocated as needed, in other words, if a site is using more RAM and CPU than others, then allocated it to that site -- I think this is called dynamic allocation.  He replied that "Php-fpm is allocated per-client basic. If this 10 clients are not 'real' clients, better use 'admin' for all domains.
You can move domain via 'change owner' in panel."

I'd like someone to help me setup PHP-FPM so that each site that requires more RAM resources due to traffic spikes is allocated RAM as needed (dynamically).

Awaiting a reply

14

Kloxo-MR Technical Helps / Help fix admin misconfiguration to protect real ip address on Cloudflare

« on: 2013-12-24, 21:15:45 »

Hi,

I added my sites to Cloudflare for a layer of security (DDOS protection) but I saw the real ip address for my sites on google while doing a search. The real ip address is listed at http://www.cloudflare-watch.org/cfs.html because Cloudflare doesn't have email forwarding and anyone can locate direct-connect addresses.

I'd like to protect my real ip address from being leaked by Cloudflare (and other sites). The following 2 links show people how to find real ip address for sites on Cloudflare:
http://tipstrickshack.blogspot.com/2012/11/how-to-find-real-ip-protected-by-cloud.html  AND
http://pentesterscript.wordpress.com/2013/11/06/cloudflare-resolver-bash-script/

The author states that "All these methods are based on bad admin configurations, if admin configuration is good ,then you can not find real i.p." He also said "Ports are filtered, so it blocks your ping request. It allow only some specific i.p."

Could you help me block the real ip address of my vps from being revealed on any sites, including networks like Cloudflare? I want to fix the admin configuration so that direct-connect, pinging and other methods cannot reveal my ip address.

Thanks in advance

15

Kloxo-MR Technical Helps / 522 error website on Cloudflare DNS not conecting to webhost

« on: 2013-09-13, 03:40:13 »

I'm a getting the following error on 4 sites that I added to Cloudflare dns:

522 Error: Connection timed out  (see attachment)

The 4 sites were added over 48 hours ago and Cloudflare stated that the dns update should happen within 24 hours.

I have 6 sites on my Centos 6 vps with Nginx webserver. Only 2 of the sites successfully resolve to Cloudflare's dns within 24 hours. However 4 of the sites are still returning a 522 error whenever I try to load them. I chatted with the registrar and was told to delete all records (A, MX) for each domain I have at the registrar except the dns records; and to add A, MX records at the webserver (which I already have in the Kloxo-MR dns template).

FYI: All domains have DNS, A, MX records at the registrar.
FYI: Today, I removed the A, MX records at the registrar on 1 of the domains that's not connecting to Cloudflare.

I've attached the Kloxo-MR dns template records I already have setup at the admin level for the vps.

FYI: There is only one Kloxo-MR dns template (see image). None of the domains under reseller have separate Kloxo-MR dns template records.

My question is this: Why is it that only 2 domains are working with Cloudflare dns while the other 4 domains are returning a 522 error?

FYI: The only difference between the 2 domains on Cloudflare and the 4 that are not resolving on Cloudflare dns is this ==> The 4 domains were working on Cloudflare before I switched from DirectAdmin and Apache to Kloxo-MR and Nginx with Centos 6. The other 2 domains were never on Cloudflare.

Could someone help me solve this problem?