Topics

46

Kloxo-MR Tips and Tricks / [TIP] Fix domainkeys

« on: 2013-08-26, 21:42:45 »

As we know, Kloxo official using domainkeys with '384' BITS, and then Kloxo-MR change to '1024' BITS.

To make sure, go to <!-- m -->http://www.protodave.com/tools/dkim-key-checker/<!-- m --> and enter 'private' in "SELECTOR' and your domain in 'DOMAIN' and then click 'Check Key'.

To fix this issue, run 'sh /script/fixdomainkey; sh /script/restart-all' from ssh.

47

Kloxo-MR Development / [ROADMAP] Kloxo-MR 6.5.0 and next release

« on: 2013-08-22, 15:17:42 »

In early August 2013, I was split dev to dev and 6.5.0-bugfix on github. The purpose is still maintain 6.5.0.f and start to incoming 6.5.1.

For our memory, different think between Kloxo-MR 6.5.0.f and Kloxo Official 6.1.12:
1. Change 'special' qmail (call it as qmail-lxcenter) to qmail-toaster for mail server; the reason is no src.rpm of qmail-toaster
2. Able lighttpd-proxy, nginx and nginx-proxy beside apache and lighttpd
3. Template-based configs for web server and dns server
4. Use php52s (special php 5.2 with latest patch; 5.2.17++) and hiawatha instead lxphp (old 5.2.1) and lxlighttpd for panel
5. Able switch different branch for php - 5.2/5.3/5.4
6. Install via yum and possible downgrade
7. Bugfixes, especially security issues (sql-injection for login and user possible take over server)
9. Possible using Mysql or MariaDB for database
8. More webmail applications (afterlogic, roundcube, sequirrelmail and telaen; drop old horde and t-dah)
9. Automatically list applications if add directory and their index.php inside /home/kloxo/httpd/cp and /home/kloxo/httpd/cp
10. Able using adminer, mywebsql and sqlbuddy beside phpmyadmin for database management
11. Create mail account automatically create 'Drafts', 'Sent', 'Spam' and 'Trash' folders
12. Create/delete/modified dns automatically add IP from 'A record' to 'allowed transfer'
13. More php-types for apache (mod_php/suphp/php-fpm/fcgid)
14. Give 'Load Average' info
15. And many more features and bugfixes...

6.5.1 planning (release target at December 2013):
1. Switch between courier-imap and dovecot for pop3/imap4 mail service
2. Add hiawatha and hiawatha-proxy as webserver *)
3. Add maradns and powerdns as dns server **)
4. Possible as 'secondary dns'
5. Change approach for multiple php (instead primary-secondary php) and multiple webserver (instead normal and -proxy)
6. Change data directories structure ***)
7. Add script for CPanel/Directadmin/others migration
8. Start writing SpectrApps (successor of InstallApps)
9. Nginx able to handle perl applications
10. Add new GUI/theme ***)
11. Use Apache + php-fpm in first/install (instead Apache + ruid2)

---------
Note:
* possible apache24 and Varnish/ATS for webserver
** powerdns need change dns table structure in kloxo database so maybe pending to 6.5.2 (or 'new panel')
*** possible pending to 6.5.2 (or 'new panel') because it's overhaul

48

Kloxo-MR Releases / [TIPS] Resolve for issues for update to 6.5.0.f-2013081304

« on: 2013-08-07, 18:19:07 »

Also read viewtopic.php?f=15&t=19167

=====================

Latest update (6.5.0.f-2013080701) have different approachs:

1. DNS Server config
- Change to template-based config
- For act dns server as 'master' need modified:

1.a. Bind/Named -> /home/bind/conf/defaults/named.acl.conf

from:

Code: [Select]

acl allow-transfer {
    localhost;
};to:

Code: [Select]

acl allow-transfer {
    localhost;
    xxx.xxx.xxx.xxx;
    yyy.yyy.yyy.yyy;
};
1.b. DJBDns -> /home/djbdns/axfrdns/tcp

from:

Code: [Select]

# sample line:  1.2.3.4:allow,AXFR="heaven.af.mil/3.2.1.in-addr.arpa"
:deny
to:

Code: [Select]

# sample line:  1.2.3.4:allow,AXFR="heaven.af.mil/3.2.1.in-addr.arpa"
:deny
xxx.xxx.xxx.xxx:allow
yyy.yyy.yyy.yyy:allow

where xxx.xxx.xxx.xxx and yyy.yyy.yyy are secondary dns (usually as ns2 in 'dns settings' in panel)

And then restart your dns server with 'sh /script/restart-services'.

2. Web server
- Change ip-port to socket for php-fpm
- If user(s) use custom file for apache/nginx/lighttpd/phpini/php-fpm, so need adjustment their custom file.

For example:
- Previous /home/php-fpm/tpl/php53-fpm-pool.conf.tpl is:

Code: [Select]

...
[<?php echo $pool; ?>]
listen = 127.0.0.1:<?php echo $fpmport; ?>
...
and then change to:

Code: [Select]

...
[<?php echo $pool; ?>]
#listen = 127.0.0.1:<?php echo $fpmport; ?>

listen = /home/php-fpm/sock/<?php echo $user; ?>.sock
...

So, adjusment all custom.*.tpl files inside /home/<driver>/tpl (where <driver> is apache/nginx/lighttpd/php-fpm/phpini). If not have custom tpl files, no adjustment needed.

49

Kloxo-MR Releases / [NEWS] Kloxo-MR 6.5.0.f-2013080502 (update to 2013080701)

« on: 2013-08-05, 18:22:51 »

The new update was released as Kloxo-MR 6.5.0.f-2013080502.

What different with previous?. The answers are:

1. Change timestamp from 20130318XX (where XX = release number) to YYYYMMDDAA (where YYYY = year; DD = month; DD = day; AA = number)
2. Change lxphp + lxlighttpd to php52s + Hiawatha (read http://www.hiawatha-webserver.org/)
3. Make dns server config also as template-based config (like web server config)
4. Bugfixes some issue (error 'socket' and etc).
5. For php-fpm, now using 'socket' instead 'ip:port'. To make sure in '/etc/sysctl.conf' have content 'fs.file-max = 209708'

Planning:

- add MaraDNS beside Bind and DJBDns
- add Hiawatha beside Apache, Lighttpd and Nginx

====================================

- For fresh install - the same as previous
 
- For update (especially if using djbdns as dns server):

1. Update kloxo-mr.repo:

Code: [Select]

cd /etc/yum.repos.d
rm -rf kloxo-mr.repo
wget https://raw.github.com/mustafaramadhan/kloxo/release/kloxo-mr.repo

2. Run this steps:

Code: [Select]

### update djbdns
yum update djbdns -y

### update for others
yum update

### if using 'cleanup-simple' need additional step with 'sh /script/fixdns'
sh /script/cleanup

### restart - maybe need 2x until no 'FAIlED' message
sh /script/restart-all

===================

Note:
- If have a problem with https/7777 access, change /usr/local/lxlabs/kloxo/init/hiawatha.conf with (already fixed since 2013080602):

Code: [Select]

# Hiawatha main configuration file
#

ServerString = Hiawatha for Kloxo-MR

ServerId = lxlabs
ConnectionsTotal = 2048
ConnectionsPerIP = 64
SystemLogfile = /usr/local/lxlabs/kloxo/log/hiawatha-system.log
GarbageLogfile = /usr/local/lxlabs/kloxo/log/hiawatha-garbage.log

MaxUrlLength = 65536

PIDfile = /var/run/kloxo-hiawatha.pid

BanOnGarbage = 300
BanOnMaxPerIP = 60
BanOnMaxReqSize = 300
KickOnBan = yes
RebanDuringBan = yes

#CGIhandler = /opt/php52s/bin/php-cgi:php
#ExecuteCGI = yes

FastCGIserver {
FastCGIid = PHP5
ConnectTo = /usr/local/lxlabs/kloxo/init/kloxo-phpcgi.sock
Extension = php
}

MimetypeConfig = hiawatha-mimetype.conf

Binding {
BindingId = port7778
Port = 7778
#Interface = 0.0.0.0
MaxKeepAlive = 180
TimeForRequest = 10,60
MaxRequestSize = 256
}

Binding {
BindingId = port7777
Port = 7777
#Interface = 0.0.0.0
MaxKeepAlive = 180
TimeForRequest = 10,60
MaxRequestSize = 256
#RequiredCA = /usr/local/lxlabs/kloxo/etc/program.ca
SSLcertFile = /usr/local/lxlabs/kloxo/etc/program.pem
}

Hostname = 0.0.0.0
WebsiteRoot = /usr/local/lxlabs/kloxo/httpdocs
StartFile = index.php
AccessLogfile = /usr/local/lxlabs/kloxo/log/hiawatha-access.log
ErrorLogfile = /usr/local/lxlabs/kloxo/log/hiawatha-error.log
TimeForCGI = 7200
UseFastCGI = PHP5
ErrorHandler = 401:/error/401.html
ErrorHandler = 403:/error/403.html
ErrorHandler = 404:/error/404.html
ErrorHandler = 501:/error/501.html
ErrorHandler = 503:/error/503.html

VirtualHost {
RequireSSL = yes

Hostname = 0.0.0.0
WebsiteRoot = /usr/local/lxlabs/kloxo/httpdocs
StartFile = index.php
AccessLogfile = /usr/local/lxlabs/kloxo/log/hiawatha-access.log
ErrorLogfile = /usr/local/lxlabs/kloxo/log/hiawatha-error.log
TimeForCGI = 7200
UseFastCGI = PHP5
ErrorHandler = 401:/error/401.html
ErrorHandler = 403:/error/403.html
ErrorHandler = 404:/error/404.html
ErrorHandler = 501:/error/501.html
ErrorHandler = 503:/error/503.html
}and then restart kloxo with 'sh /script/restart'.

===================

Upload update to 2013080701 will make bind able to use for Kloxo-MR again!. Please using update kloxo-mr.repo inside /etc/yum.repos.d

50

Kloxo-MR Development / [CHANGE] lxphp+lighttpd to php52s+nginx for Kloxo-MR

« on: 2013-07-22, 19:51:52 »

Go to http://forum.mratwork.com:7778 and you will see Kloxo-MR 6.5.1.a-2013072201 as a version. This version not ready to upload to github dev.

In this version (alreafy exist on Kloxo-MR 6.5.0.f-2013031829) not using lxphp + lighttpd for running Kloxo panel but using php52s (special php 5.2 for next release for multiple php) + nginx (regular).

Because still php 5.2 for php52s, Kloxo-MR not using php-fpm but spawn-fcgi. As we know, php-fpm not ready for php 5.2 and just patch for it.

This version still testing intensively for speed and prevent (minimize) error 'Could not Connect to the server [localhost]...'.

51

Kloxo-MR Tips and Tricks / [ALERT] Kloxo-MR issue on Centos 5

« on: 2013-07-07, 09:52:08 »

I found an mail issue on CentOS 5.

Symptom:
1. Add mail/client: mail account not save in /home/lxadmin/mail/domains/<domain> but /home/lxadmin/mail/domains/<X>/<domain> (where <X> = 1 char of 1-9 or A-Z; <domain> = domain name)

2. reset mysql root password with 'sh /script/reset-mysql-root-password <password>' not work

This issue still investigate and will be release new update if ready.

Maybe this issue related to mysql from IUS repo and effect to qmail-toaster.

This issue not found in Centos 6.

52

Kloxo-MR Releases / [ATTN] Github trouble (related to Kloxo-MR rpms)

« on: 2013-06-13, 20:17:01 »

At this moment, very often install Kloxo-MR fail or missing rpm. It's because Github (where Kloxo-MR use as repo for their rpms) slow or unreach.

Resolve for this situation, re-run 'setup.sh' for fresh install.

53

Kloxo-MR Development / [HELP] Need example CPanel/DirectAdmin backup files

« on: 2013-06-08, 17:36:43 »

I need example CPanel/DirectAdmin backup files to make migration-script for Kloxo-MR. I hope with this script make easy migrate from CPanel/DirectAdmin to Kloxo-MR.

54

Kloxo-MR Tips and Tricks / [TIP] How to setup Qmail on Kloxo-MR

« on: 2013-04-29, 20:06:45 »

This tips related to Qmail-toaster (mail server) on Kloxo-MR.

Warning: - update Kloxo to Kloxo-MR need running:

Code: [Select]

sh /script/convert-to-qmailtoaster

Prepare server:
1. Choose 1 of domains or subdomains as primary 'domain' (this domain must be access from public; example: 'mydomain.com')

2. Set server hostname as subdomain of primary 'domain' (example: 'subdom.mydomain.com') and add 'subdom' as 'A record' on dns setting

3. Add 'xxx.xxx.xxx.xxx subdom.mydomain.com subdom' on '/etc/host' (change xxx.xxx.xxx.xxx with primary ip)

4. Add/Change to 'HOSTNAME="subdom.mydomain.com"' in '/etc/sysconfig/network'

5. Reboot and then run 'hostname -f' and must be appear as 'subdom.mydomain.com'

Setup/Update qmail:
1. For update from Kloxo, need running 'sh /script/convert-to-qmailtoaster'
2. For to make sure, go to 'Mysql password reset' to change mysql root password
2. Running 'sh /script/fix-chownchmod; sh /script/fixmail-all'

Testing:
1. Run '/home/vpopmail/bin/vdominfo' and will be match with '/var/qmail/users/assign' content

2. If login to webmail failed, check the content of:
- '/var/qmail/supervise/imap4/run',
- '/var/qmail/supervise/imap4-ssl/run',
- '/var/qmail/supervise/pop3/run',
- '/var/qmail/supervise/pop3-ssl/run',
- '/var/qmail/supervise/smtp/run',
- '/var/qmail/supervise/submission/run'

and find out something like 'exec /usr/bin/softlimit -m 9000000 '.

Increase the value until 3-4 times but no more than 64000000. Original softlimit have a problem especially on Centos 64bit (version 5 and 6).

3. Run 'telnet localhost 25' for to make sure this port not blocked/inactive. Testing also on port 110, 143, 993, 995, 587 and 465

4. Find error on 'log manager' and 'mail queue'

--------------------
Additional info:

1. Sometimes, after Kloxo-MR update, qmail not work.

You can see in 'Log Manager' for IMAP error or SMTP error like '@400000005187cdc72b428044 tcpserver: fatal: unable to bind: address already used'.

For this situation, need reboot. Or running 'qmailctl stop; qmailctl start' (remember: 'qmailctl restart' not work).

It's ok if appear something like '@40000000518752e21fc74ac4 tcpserver: status: 0/40'

2. Repair qmail:

Code: [Select]

qmailctl stop
yum reinstall *-toaster -y
sh /script/fixmail-all
qmailctl stop
qmailctl start

3. If still not work, run :

Code: [Select]

chmod 4755 /home/vpopmail/bin/vchkpw
qmailctl stop
qmailctl start

==============

NOTE:
- This information not accurate for latest Kloxo-MR (6.5.0.f-2013031825)
- Only command needed:

Code: [Select]

# fix mail issue
sh /script/fixmail-all

# better stop and start instead restart
qmailctl stop
qmailctl start
==============
NOTE:
- Reinstall Qmail-toaster

Code: [Select]

# uninstall toaster
yum remove *-toaster

# remove bin and config
rm -rf /var/qmail/

# install again (including clamav and spamd) and also other applications as dependencies
yum install *-toaster webalizer cronie cronie-anacron crontabs

# run fix mail config (qmail-toaster config and webmail)
sh /script/fixmail-all

# restart (using stop and start better for this situation rather than restart)
# to make stopped and may appear error message
qmailctl stop
# start
qmailctl start

if still something wrong:

Code: [Select]

sh /script/cleanup
sh /script/fix-all
sh /script/restart-all
and check with 'qmailctl stat' and will be appear:

Code: [Select]

[root@viv ~]# qmailctl stat
authlib: up (pid 802838) 27 seconds
clamd: up (pid 802811) 27 seconds
imap4: up (pid 803967) 0 seconds
imap4-ssl: up (pid 803954) 0 seconds
pop3: up (pid 803931) 1 seconds
pop3-ssl: up (pid 803919) 1 seconds
send: up (pid 803949) 1 seconds
smtp: up (pid 803959) 0 seconds
smtp-ssl: up (pid 803932) 1 seconds
spamd: up (pid 802843) 27 seconds
submission: up (pid 803922) 1 seconds
authlib/log: up (pid 802839) 27 seconds
clamd/log: up (pid 802813) 27 seconds
imap4-ssl/log: up (pid 802833) 27 seconds
imap4/log: up (pid 802828) 27 seconds
pop3-ssl/log: up (pid 802840) 27 seconds
pop3/log: up (pid 802827) 27 seconds
send/log: up (pid 802832) 27 seconds
smtp-ssl/log: up (pid 802834) 27 seconds
smtp/log: up (pid 802837) 27 seconds
spamd/log: up (pid 802822) 27 seconds
submission/log: up (pid 802847) 27 seconds
[root@viv ~]#

==============
NOTE: - for to make sure, receipent (gmail, yahoomail and others) not thinking your email as 'spam'
- Activate 'Enable Domainkey' in 'Server Mail Settings'
- In every domain, active 'Enable SPF' in 'EMail Auth' (also active 'Enable DMARC' as optional)
- As to provider to setup 'reverse-dns' for your server IP(s)
- Set 'hostname' with FQDN format (use 'server1.youdomain.com' instead 'server1')

55

Payed Supports and Donations / [LIST] Donators

« on: 2013-04-11, 11:12:18 »

This is list of donation for Kloxo-MR developing:

A. Per-April 2013 (convert to USD):

1. Tsanten - 10,00
2. goblog - 10,00
3. ariefewweb - 20,00
4. redpages - 10,00
5. opotoiki - 15,00
6. srowako - 50,00
7. imgmoney - 15,00
------------------
Total: USD 130,00

B. Per-May 2013 (convert to USD):

1. vinceent -  USD 10,00
2. compy22 -  USD 10,00
------------------
Total: USD 20,00

C. Per-June 2013 (convert to USD):

1. suplover -  USD 10,00
2. mhzare - USD 10,00
------------------
Total: USD 20,00

D. Per-July 2013 (convert to USD):

1. arwa99 -  USD 15,00
2. mamaswae - USD 25,00
------------------
Total: USD 40,00

E. Per-Aug 2013 (convert to USD):
1. prgs1971 - USD 1,00
2. Arwa99 - USD 20,00
3. crossing - USD 10,00
4. Paddyku - USD 10,00
------------------
Total: USD 41,00


E. Per-Sep 2013 (convert to USD):
1. prgs1971 - USD 1,00
2. Miki - USD 20.00
------------------
Total: USD 21,00

Thanks.

56

Payed Supports and Donations / [ATTN] Donation and Sponsorship

« on: 2013-04-08, 20:50:06 »

Until now, donation and or sponsorship just very little. it's hard to developing Kloxo-MR as free/open-source products without donation and or sponsorship. Without donation and sponsor mean all resources (spend money for servers, spend times for developing Kloxo-MR and others) mostly from myself.

Hard to continuing for developing Kloxo-MR (also other apps) because I must share my times for another business (make a money). I hope everybody which using Kloxo-MR no hard to donation and as sponshorship.

Need minimum USD 60-80/month for rent 6-8 VPSes (4 VPSes for rpm compile purpose and 2-4 VPSes for testing and comparing) and internet connection USD 20-40/month. Total USD 80-120/month

At this moments, 3 options for donations:
1. Pay via paypal - click here
2. Special for Indonesia's peoples) - Mandiri: 137.00.0180361.4 (Mustafa Ramadhan) or BCA: 445.105.006.5 (atasnama Lia Amaliati)
3. Rent VPS to Hostspectra.com - here

People(s) make a donation will be listing in 'special' thread.

For sponshorship, need negotiation.

57

Non Technical Discussions / [HOWTO] Kloxo-MR Installing

« on: 2013-04-08, 17:39:33 »

Taken from https://github.com/mustafaramadhan/klox ... nstall.txt:

Code: [Select]

A. pre-install -- better for fresh install

    cd /

    # update centos to latest version
    yum update -y
    # install some packages like package-cleanup, etc
    yum install yum-utils yum-priorities vim-minimal subversion curl zip unzip -y
    yum install telnet -y

    setenforce 0
    echo 'SELINUX=disabled' > /etc/selinux/config

    cd /

B. Install Kloxo-MR

B.1 For Dev (alpha, beta, candidate) Release:
   - Install/reinstall/upgrade -- data not destroyed with this fork
     for existing kloxo (6.1.x), run 'sh /script/update' first.

    # delete if exist, create kloxo temp dir
    rm -rf /tmp/kloxo; mkdir /tmp/kloxo ; cd /tmp/kloxo;

    rm -f ./kloxo-mr-dev.sh

    # get kloxo-mr-dev installer from github
    wget https://github.com/mustafaramadhan/kloxo/raw/dev/kloxo/install/kloxo-mr-dev.sh --no-check-certificate

    # install kloxo
    sh ./kloxo-mr-dev.sh
   
    # better reboot
    reboot
   
B.2. For Final Release:
   - Install/reinstall/upgrade -- data not destroyed with this fork
     for existing kloxo (6.1.x), run 'sh /script/update' first.

    # move repo dir
    cd /etc/yum.repos.d/

    # get repo file -- no need for 6.5.0.c and after
    wget https://github.com/mustafaramadhan/kloxo/raw/release/kloxo-mr.repo --no-check-certificate

    # move to /
    cd /

    # install (and then run 'setup.sh' instead 'installer.sh')
    yum install kloxomr
   
    # better reboot
    reboot

58

Kloxo-MR Releases / [ISSUE] Mysql 5.5+ and MariaDB

« on: 2013-03-02, 14:29:57 »

Centos using Mysql version 5.5 as 'default'. In latest version of 5.5, no permit 'skip-innodb' inside '/etc/my.cnf'.

Sadly, fresh install of Kloxo-MR always add 'skip-innodb' for reason minimize memory usage. Latest upload of Kloxo-MR fixed this issue for fresh install.

Fix for this situation:
1. Update your Kloxo-MR

2. Repair login issue

Code: [Select]

# disable 'skip-innodb'
sed -i  's/skip-innodb/#skip-innodb/' /etc/my.cnf

# reset mysql root password
sh /script/reset-mysql-root-password YOURNEWPASSWORD

# reset kloxo database password
sh /script/resetpassword master YOURNEWPASSWORD

# run cleanup
sh /script/cleanup

# restart services
sh /script/restart-services

MariaDB also no permit for 'skip-innodb'. At this moment, MariaDB not work perfectly on Kloxo-MR because need adjustment sql command on php code.

Kloxo-MR running well with MariaDB now. Need update latest version and running 'sh /script/mysql-to-mariadb'.

59

Kloxo-MR Releases / [TIP] Reset Password

« on: 2013-02-28, 23:21:35 »

Taken (but modified) from http://forum.lxcenter.org/index.php?t=msg&th=15560

1. Change root password:

Code: [Select]

su - root
passwd

2. Mysql root password: --> ERROR 1045 (28000): Access denied for user 'root'@'localhost'

Code: [Select]

service mysqld stop

mysqld_safe --skip-grant-tables &
mysql -u root

mysql>
mysql> use mysql;
mysql> UPDATE user SET Password = PASSWORD ('newpassword') WHERE User='root';
mysql> FLUSH PRIVILEGES;
mysql> quit;

service mysqld start
or

Code: [Select]

sh /script/reset-mysql-root-password <newpassword>

3. Kloxo admin password login:

Code: [Select]

sh /script/resetpassword master <newpassword>

4. Reset Kloxo mysql password: --> Error "Could not open database connection." when access to Kloxo

Code: [Select]

sh /script/fix-program-mysql <mysqlrootpassword>
or, enough:

Code: [Select]

sh /script/fix-program-mysql

Note: code like '<newpassword>' must be change to 'dAFfad13' (for example; not include <>)

60

GNU/Linux Helps / [INFO] SSHD Rootkit Rolling around

« on: 2013-02-19, 16:01:31 »

I found an issue related to CPanel. Read http://www.webhostingtalk.com/showthread.php?t=1235797

It's maybe affect to Kloxo/Kloxo-MR too if hacker able the same access level like CPanel.