I'm on CentOS 4.4, webmin, LAMP, OpenSSH and ProFTPD server.
But what I'm wondering is how to look at my off network backup space.
I can only access my backup space through the DC network/my own server. So I need some kind of way to bounce a GUI ftp connection off the server - which would allow me to look at the files...
I know I can use rsync for backing up and restoring. But the way I understand rsync I need to know exactly what I am to move, as it operates on an exact command.
The issue is that a lot of my emails seem to be bouncing back at the moment with the subject 'Subject: Warning: could not send message for past 1 day'
Could anyone explain why this might be the case? I've had a look online and the only thing I can think it might be is that my email address has been gray listed. To solve this it was recommended to use a SPF Record.
I did not really want to start messing around with my DNS before I could get some confirmation that this is the case. Though if there is another explaination please can you let m know.
The emails that I have sent have all had pdf's attached to them.
-----Original Message----- From: Mail Delivery System [mailto:Mailer-Daemon@swh1.sellwebhost.com] Sent: December 29, 2007 6:05 AM To: nobody@swh1.sellwebhost.com Subject: Mail delivery failed: returning message to sender
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:
alakeneex@mail.ru SMTP error from remote mail server after RCPT TO:<alakeneex@mail.ru>: host mxs.mail.ru [194.67.23.20]: 550 Access from ip address 72.55.156.210 blocked. Visit http://win.mail.ru/cgi-bin/support_bl?ip=72.55.156.210
------ This is a copy of the message, including all the headers. ------
Return-path: <nobody@swh1.sellwebhost.com> Received: from nobody by swh1.sellwebhost.com with local (Exim 4.68) (envelope-from <nobody@swh1.sellwebhost.com>) id 1J8ZV7-0001oN-QQ for alakeneex@mail.ru; Sat, 29 Dec 2007 06:05:09 -0500 To: alakeneex@mail.ru Subject: Welcome to hidden.com Forums Reply-to: jim@hidden.com From: jim@hidden.com Message-ID: <4448804740c38716c8c65ef3203108b3@hidden.com> MIME-Version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: 8bit Date: Sat, 29 Dec 2007 06:05:09 -0500 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: PHP X-MimeOLE: Produced By phpBB2
Welcome to hidden.com Forums
Please keep this email for your records. Your account information is as follows:
Please do not forget your password as it has been encrypted in our database and we cannot retrieve it for you. However, should you forget your password you can request a new one which will be activated in the same way as this account.
This is only one exemple from one forum but many of our users use forums as well and we receive dozens of similar mails.. Is there a way to stop this or to make the mail rebound to the user instead to nobody?
I have one of our servers that is bouncing all sent emails to hotmail, MSN and some others. The emails often come back saying they are bounced as SPAM.
There were SPAM issues on this particular server at one point, but have since been corrected one we tightened it up.
Now, how can I fix this? Can I change the servers hostname? Are they rejecting by hostname, or by IP?
And do I need to just contact each provider and try to get off their blacklist?
I am facing a problem with my mails. I have hosted a new domain on my server and that domain is getting a lot of bounce messages with the following error message:
Message is waiting at <Mail server name> for delivery to <recipients SMTP>.
Message delivery has been delayed to the following recipients: Recipient: [SMTP:<recepients email id>] Reason: Remote SMTP Server Returned: 450 <Senders email id>: Sender address rejected: Domain not found
Also when I try to check the DNS settings of that domain from network-tools.com I get the error message as:
Retrieving DNS records for <domain name>...
DNS servers nameserver1 [xxx.xxx.xxx.xxx] nameserver2 [xxx.xxx.xxx.xxx] Query for DNS records for <Domian name> failed: Timed out
The hosting server is configured on the following softwares: Plesk 8.4 control panel Bind DNS Mail Enable Mail server
I own my domain [url] and have a reseller plan on a shared host [url]I have the DNS on godaddy pointed to the nameservers of reyox and on the Cpanel of my domain at reyox I have a forwarding account [url]set to forward to my gmail account.
To the best of my knowledge this has worked flawlessly for years but recently I have been starting to not receive emails from people. I found out when I wasn't getting replies I had been expecting and when I inquired or called the people instead they told me that hey replied... it's been happening over and over again lately.
When I asked my host last week they replied: "We did clear up some mail issues last night, some issues with the queue processing."
However after that it kept happening and now I am at a loss.
I don't know what's wrong nor how to troubleshoot it... It happened with people that are on all sorts of domains (gmail, aol, personal domains etc) and it happens sporadically... It's really frustrating because I don't know what else I am not getting considering that every other day I find out about an expected email I didn't get.
The werid thing is that none of the senders whose emails got lost reported that they received a bounce issue...
how I can address this in terms of troubleshooting it and finding a solution?
Is there some sort of email monitoring services like there are site uptime monitoring services?
I ran the script in KB article 123160 [1] to disable SSLv3 and avoid the POODLE vulnerability, but I recently discovered that this has caused all inbound emails to bounce. The bounce message says, "TLS Negotiation failed."
While I am used to reselling and domain registration stuff, I am totally new to DNS stuff..I tried many searches and readings without hope. that's why I need your help.
We have a problem that makes both incoming and outgoing emails from our website's email server not going or received, without any failure message or error message on both sides: the sender and receiver.
We talked to our webhosting company- they do not own, but host on a dedicated provided by Iweb in Canada - and they told us a quick solution for this:
To buy a private IP address, therefore our websites with them will not get blocked as spammy IP, setting us away from the dozens of sites they have on the same server IP (as domaintools reverse IP reported: xx other sites hosted on this server).
The company I work for agreed on this solution immediately as we are loosing customers for this problem.
They charged us 8$ a month for this "private ip".
We had the same problem for another day after their solution, when I checked domaintools, I found our websites are still on the same IP of the company. I called them, and the Admin there told me: it's a hidden CNAME setting that is not shown to public because it's "private" and the delay happenned because we had to contact Hotmail staff and wait for their reply to include it in their safe list, but others as Gmail and Yahoo do not require contacting them and will go through automatically."
My question is:
- What is Private IP/ Private DNS? - Why and how it is used to prevent false blocking/bouncing? - Does that mean they had to sell it to every domain, while their IP is not on blacklists (I checked it). - Is Private IP just an internal setting or it has to be bought from a large ISP like regular/public IPs? and if just some settings, is this price fair? we pay 120$ annually for hosting one site with them. - They told us they put our other two sites on theis same new private IP. How can this be possible? - I cannot understand: Hotmail can prevent our emails from reaching inboxes, but can it also prevent its users emails from reaching us?? Is this issue a Private-IP related?? - What do you think the real problem is, and what advice(s) should I follow to have our emails going and coming smoothly in the future?
Note: We don't send unsolicited emails ever. We only have a 1500-member mailinglist that we send a newsletter to, once every few months.
Our daily email traffic is about 10 to 20 messages in and out.
I've been attempting to develope a server running apache 2+, php 5, and I was running into issues installing php as cgi.... All my scripts require The shebang: #!/usr/bin/php at the top to execute properly. Anyone know a good site/how to that explains how to do this?
has anyone else here run suexec with apache? If so, could you tell me what you compiled it with? Just curious, as I think i'm doing everything right, yet I still fail
FFMPEG INSTALLATION FROM SOURCE FFMPEG INSTALLATION FROM SOURCE installed by: Robertas Dereskevicius Edited by Jon Nikolakakis OS/ Fedora Core 5
Summary download and install: libffac libffad2 xvid libogg,libvorbis mp3lame ffmpeg
Setting Up Install Folder, Logging and download Packages 1)Log into ssh 2) cd /usr/src && mkdir install && cd install 3) Download faad2 and faac from http://faac.sourceforge.net/oldsite/download.php get Faad2 and faac (new versions)
4) Verify that you have these components are installed rpm -qa automake rpm -qa autoconf rpm -qa libtool rpm -qa m4 rpm -qa gcc-c++
If any are missing than simply yum install (packagename), if you dont have a package manager than get one, it will save you alot of time and headaches.
Installing Faac 5)tar -zxvf faac-1.24.tar.gz && cd faac 6) sh bootstrap 7) ./configure 8) make 9) make install 10) cd ..
Installing Faad2 11) tar -zxvf faad2-2.0.tar.gz 12) cd faad2 && less README.linux 13) There is 2 bugs with this package, so need to manually edit these files 14) nano Makefile.am Edit the file to look like this SUBDIRS = libfaad common frontend plugins EXTRA_DIST = faad2.spec
15) cd common/mp4ff && nano mp4ffint.h 16) Comment out this line //void mp4ff_track_add(mp4ff_t *f);
17)Save file and cd ../.. 18)autoreconf -vif 19) ./configure 20) make 21) make install
Installing Libogg and Libvorbis 22)cd .. and then Check to see if libogg and libvorbs rpm -qa libogg-devel rpm -qa libvorbis-devel rpm -qa libncurses-devel
If not installed then simply Package Install (replace yum and install settings with your package manager) yum install libogg-devel yum install libvorbis-devel yum install libncurses-devel
i have 1 dedicated server, and 1 shared hosting the domain.com is hosted in dedicated server i want the subdomain sub.domain.com in other host
i have try this but not working :
I. the dedicated server have whm and cpanel
in whm i go to DNS Functions --> Edit DNS Zone --> i add sub name , choose A, and enter other ip host
II. the shared hosting only have cpanel
i go to cpanel --> addons domain --> add my domain.com then go to cpanel again --> Subdomains --> i add sub from domain.com
with above step i just got this when accessing the url http://sub.domain.com :
Quote:
Great Success ! Apache is working on your cPanel® and WHM Server If you can see this page, then the people who manage this server have installed cPanel and WebHost Manager (WHM) which use the Apache Web server software and the Apache Interface to OpenSSL (mod_ssl) successfully. They now have to add content to this directory and replace this placeholder page, or else point the server at their real content.
Anyone have any info on how to do this? It appears my hosts don't know how to do it..
"You have the tun module which can be loaded via a modprobe but the dev entries would appear to be needed to be made. Of course, you could do this if you know how or wait while I research it. We know tun/tap works on openvz but you're the first request we've had on Xen."
"You have the tun module which can be loaded via a modprobe but the dev entries would appear to be needed to be made. Of course, you could do this if you know how or wait while I research it. We know tun/tap works on openvz but you're the first request we've had on Xen."
What is ASSP? ASSP is an Anti-Spam SMTP Proxy . The homepage can be found here. ASSP is a lightweight daemon that can filter mail based on various things such as SPF, RBLs, Bayesian word lists, as well as blocking email addresses from getting mail, or having mail filtered.
This tutorial will walk you through getting the admin interface for CPanel setup for ASSP. Currently, a paid user interface can be obtained here (note that I am in no way affiliated with, nor have I tried to use this UI, I am just offering the link to those that might find it useful)
Firstly, the setup: You will need to activate Cpanel PRO (pro.cpanel.net/activate) for your server in order for this to fully work. This activation is currently free. Simply go to the previous mentioned URL and enter your IP address if you have not done so already. Once you have activated CPanel PRO, go into whm->addon modules and check clamav connector, then click on "save". This will install clamav for you to use Once you have done THIS, go to whm->service manager and UNcheck spamd (it is no longer necessary with ASSP), and again click on save/submit. Note that this IS optional, however the purpose of ASSP is to defeat spam before it GETS to SpamAssassin. Once you have done THAT, go into whm -> tweak settings and uncheck SpamAssassin and BoxTrapper mail.
Secondly, the requirements: ASSP needs certain perl modules established To install these, simply login (as root) to your server, and type the following
Code: /scripts/perlinstaller --force Compress::Zlib /scripts/perlinstaller --force Email::Valid /scripts/perlinstaller --force File::ReadBackwards /scripts/perlinstaller --force File::Scan::ClamAV /scripts/perlinstaller --force Mail::SPF::Query /scripts/realperlinstaller --force Mail::SRS /scripts/realperlinstaller --force Tie::RDBM /scripts/realperlinstaller Sys::Syslog /scripts/perlinstaller --force Net::LDAP /scripts/perlinstaller --force Time::HiRes /scripts/perlinstaller --force Tie::DBI Note that the --force is optional, however it will make sure you've got it installed. Do these one at a time as some of these have configurable options to them. One more perl module is needed. Since the later versions of Net::DNS are known to cause issues with RBLs, SPFs and the like, it is advised to use 0.57 . This can be obtained by doing the following:
Code: mkdir /usr/local/assp cd /usr/local/assp mkdir /usr/local/assp/tmp cd /usr/local/assp/tmp wget [url] tar xzf Net-DNS-0.57.tar.gz cd Net-DNS-0.57 perl Makefile.PL make make test make install Do NOT remove the /usr/local/assp/tmp directory as when you update cpanel, it will try to auto update Net::DNS again, so you will want this intact.
Now, let's get with the program here and install ASSP:
Code: cd /usr/local/assp wget [url] unzip -d /usr/local/assp /usr/local/assp/ASSP_1.2.6-Install.zip mv --target-directory=/usr/local/assp /usr/local/assp/ASSP/* mv --target-directory=/usr/local/assp /usr/local/assp/ASSP/.DS_Store rm -rf /usr/local/assp/__MACOSX rm -rf /usr/local/assp/ASSP rm -f ASSP_1.2.6-Install.zip rm -f Win32-quickstart-guide.txt;rm -f freshclam.bat cd /usr/local/assp mkdir pb cd pb touch denysmtp.txt touch exportedextreme.txt touch pbdb.black.db touch pbdb.rbl.db touch pbdb.white.db cd /usr/local/assp mkdir /usr/local/assp/notspam mkdir /usr/local/assp/spam mkdir /usr/local/assp/errors mkdir /usr/local/assp/errors/notspam cd /usr/local/assp wget [url] chmod 755 start wget [url] chmod 755 stop cd /etc/rc.d/init.d wget [url] chmod 755 assp The core of ASSP is now installed. However, the development versions have updated functions to use for users. Of course, this is completely optional, but is recommended completely. This can be done by the following in SSH
Code: cd /usr/local/assp/ mv assp.pl assp.pl_old mv spamdb spamdb.old mv rebuildspamdb.pl rebuildspamdb.pl.old mv repair.pl repair.pl.old mkdir Data mkdir Data/Lists wget [url] wget [url] 000F4555.2/rebuildspamdb.pl wget [url] wget [url] mv assp.css images wget [url] cd Data/Lists wget [url] chmod u+x /usr/local/assp/*.pl Now, let's get it up and running, and configure it, shall we?
Code: cd /usr/local/assp /etc/init.d/assp start You'll see ASSP sending out some messages and then doing nothing. This is ok, and it's the expected response. Now, we need to edit some stuff. Hit ctrl-c (cancel) to shut down ASSP once it's stopped, you'll see the following file in the assp directory - assp.cfg . Edit that with whatever you want for an editor, something like:
Code: nano assp.cfg You want to change a few options immediately just to get it working Look for the lines that are something like:
Code: runAsGroup:= runAsUser:= and change them to be:
Code: runAsGroup:=root runAsUser:=root Then look for the line that is
Code: AsADaemon:= and change it to
Code: AsADaemon:=1 Now, let's change the password just so that we're secure: look for the line that is
Code: webAdminPassword:=nospam4me and change that to
Code: webAdminPassword:=insertrandompasswordhere Now, let's tell ASSP to setup and accept mail for our domains. Look for the line something like
Code: localDomains:= and change that to be
Code: localDomains:=file:/etc/localdomains Almost there, just a couple more changes needed. Look for the line that is something like
Code: smtpDestination:=127.0.0.1:225 and change that to be
Code: smtpDestination:=127.0.0.1:125 (or another port instead of 125, just REMEMBER the port!) and one more change change the line that looks like
Code: listenPort:=125 to
Code: listenPort:=25 Now save and exit the file. If you're using nano/pico, that would be ctrl-x , just make SURE to save the file before you exit! Now, let's get ASSP fired up again
Code: /etc/init.d/assp start let's make sure you have assp starting on system boot:
Code: chkconfig --add assp Let's add a crontab to make sure that ASSP rebuilds the bayesian spam list
Quote:
crontab -e
Code: 10 4 * * * cd /usr/local/assp;/usr/local/assp/rebuildspamdb.pl Occasionally, what I've seen is ASSP will get "hung" on certain things and just kill itself. This fix will work for this, and make sure your ASSP installation is running smoothly
Open up another file on the server, my example will be /bin/asspcheck. In this file, add the following contents
Code: chmod u+x /bin/asspcheck Now, make sure it's called every 60 seconds. Add this to your root crontab
Quote:
crontab -e
Code: * * * * * /bin/asspcheck Now, let's go BACK into WHM and setup the variables needed to get exim to use ASSP In exim configuration editor, click on "advanced editor" Clear out EVERYTHING from all of the existing boxes. Keeping these with data can cause ASSP to not function as it should When you've done that, add the following to the top box:
Code: # assp local_interfaces = 127.0.0.1.125 If you changed this variable to something else
Code: smtpDestination:=127.0.0.1:125 put in the other port, NOT 125, so it would look like 127.0.0.1.whateverporthere
Click on Save Exim will restart and you now have a working installation of assp
Now, let's go to it and work with it a bit, shall we? go to [url], enter the user admin and the password you changed nospam4me to. This will get you logged in and you can tweak the settings as you feel necessary.
ASSP is a great and powerful proxy for any mail server, which blocks using RBLS, whitelists, etc. It is advisable to setup the email interface and let your customers know of this so that you can get them to help you in reporting and addressing spam.
Parts of this howto were taken from this page, however much of that data has been found to be outdated as far as downloads from CVS and the like go, and I've added quite a bit of useful information into it as well.
Go through the ASSP configuration VERY carefully, and ONLY change what you're sure of.
Start with the RBLs, increase the list to 5 and max hits to 2 as suggested.
If you notice problems with this or know how it might be better, hey, feel free to post in here and I'll keep it as updated as possible :)
I found a handful of howto's for dspam, but none of them catered for exim with virtual users. After hunting around, I eventually have it working on a cPanel server, with user authentication for mail users.
My setup: dspam version 3.6.8, using mysql driver. exim version 4. mysql 4.1 CentOS (2.6.9-023stab033.9-enterprise) cPanel / WHM - latest RELEASE version.
Download the source, configure and compile:
Code: # cd /usr/local/src # wget http://dspam.nuclearelephant.com/sou...m-3.6.8.tar.gz # tar -zxf dspam-3.6.8.tar.gz # cd dspam-3.6.8 Configure, replacing user/groups with your web-server user (web / apache / nobody), and use your mysql-include / library paths (will need mysql-devel on rh based systems).
Code: # ./configure --prefix=/opt/dspam-3.6.8 --with-local-delivery-agent=/usr/sbin/exim --with-storage-driver=mysql_drv --with-userdir=/var/spool/mail/dspam --with-userdir-owner=nobody --with-userdir-group=nobody --with-dspam-mode=none --with-dspam-owner=nobody --with-dspam-group=nobody --enable-whitelist --enable-spam-delivery --enable-alternative-bayesian --disable-dependency-tracking --enable-virtual-users --with-mysql-includes=/usr/include/mysql --with-mysql-libraries=/usr/lib/mysql/ --with-dspam-home=/opt/dspam-3.6.8/var/dspam # make && make install Set up mysql
Code: # mysqladmin -p create dspamdb # mysql -p >grant all privileges on dspamdb.* to dspamuser@localhost identified by dspampass; >flush privileges; >exit; Create tables:
Code: mysql -p dspamdb < /usr/local/src/dspam-3.6.8/src/tools.mysql_drv/mysql_objects_speed.sql mysql -p dspamdb < /usr/local/src/dspam-3.6.8/src/tools.mysql_drv/virtual_users.sql Link dspam in opt for easy versioning:
Code: ln -s dspam-3.6.8 /opt/dspam Copy the web interface files to a web directory:
This next step is required for pop3 authentication. Install perl module Apache::AuthPOP3 - which does apache pop3 authorisation:
Code: perl -MCPAN -e shell install Apache::AuthPOP3 Next, apache will need mod_perl installed - WHM -> Apache Update will allow you to enable the perl module (I am running it alongside php with no issues).
Then in /usr/local/apache/conf/httpd.conf:
Code: ScriptAlias /dspam/ /opt/dspam/cgi-bin/ Alias /dspam_files/ /opt/dspam/htdocs/ <Directory /opt/dspam/cgi-bin> Options None AllowOverride AuthConfig Order allow,deny Allow from all </Directory> Create .htaccess in /opt/dspam/cgi-bin as follows:
Code: AuthName "Dspam" AuthType Basic PerlAuthenHandler Apache::AuthPOP3 PerlSetVar MailHost localhost Require valid-user #PerlSetVar UserMap pop3user1=>realname1,pop3user2=>realname2 #Require user pop3user1 pop3user2 pop3user3 pop3user4 there are 2 commented parameters you can set when using POP3 auth - sure its pretty self-explanatory.
Set up admin user (the admin_user must be able to authenticate as a pop user):
Code: #echo "admin_user" >> /opt/dspam/cgi-bin/admins Create a queuesize script for web user - so dspam can determine how many messages in the queue.
Code: $CONFIG{'MAIL_QUEUE'} = "/usr/local/bin/eximqsize"; $CONFIG{'WEB_ROOT'} = "/dspam_files"; $CONFIG{'LOCAL_DOMAIN'} = "FQDN"; #your servers fully qualified domain name - e.g. host.yourdomain.com Next, set the default preferences for the system (you need /opt/dspam/bin in your path if you copy and paste this...):
Code: dspam_admin ch pref default trainingMode TEFT dspam_admin ch pref default spamAction quarantine dspam_admin ch pref default spamSubject "[SPAM]" dspam_admin ch pref default enableWhitelist on dspam_admin ch pref default showFactors off Permissions: I would suggest reading the README over dspam to get a full understanding of the permissions required for running of dspam. My permissions were:
Trust: root Trust: mail Trust: nobody / httpd #choose 1 - what ever your webserver runs as - `ps axu | grep httpd` to find out
#Use the same details as you did for the "grant all privileges on...." statement in mysql. MySQLServer /var/lib/mysql/mysql.sock MySQLPort MySQLUser dspamuser MySQLPass dspampass MySQLDb dspamdb MySQLCompress true
MySQLVirtualTable dspam_virtual_uids MySQLVirtualUIDField uid MySQLVirtualUsernameField username Almost there.... Confirm that mysql is configure to listen on a socket in /etc/my.cnf (or whereever your config file is):
Code: # cat /etc/my.cnf [mysqld] datadir=/var/lib/mysql socket=/var/lib/mysql/mysql.sock Now the final step - exim configuration. This is the part that took the longest, hopefully it works for you. Just as I read in the howto's I used for this, please please please dont just copy and paste - you stand a good chance of breaking your mail server if you make changes without understanding. Be warned.
My config file is /etc/exim.conf. This should be edited using the WHM -> Exim Configuration Editor -> Advanced.
Code: #Routers - Add these in the box before virtual_user delivery / user delivery router). dspam_router: no_verify #uncomment the next line to disable dspam for virtual users. # check_local_user condition = "${if and { {!def:h_X-Spam-Flag:} {!def:h_X-FILTER-DSPAM:} {!eq {$sender_address_domain}{$domain}} {!eq {$received_protocol}{local}} {!eq {$received_protocol}{spam-scanned}} } }" headers_add = "X-FILTER-DSPAM: by $primary_hostname on $tod_full" driver = accept transport = dspam_spamcheck
## The next 2 routers allow you to forward spam / non-spam to dspam for training (e.g. spam-yourmail@yourdomain.net). # spam-username dspam_addspam_router: driver = accept local_part_prefix = spam- transport = dspam_addspam
##Transports - can be added anywhere: #this adds the spam-scanned protocol header, so when it is passed back to exim after being processed by dspam, it doesnt get stuck in a loop. dspam_spamcheck: driver = pipe command = "/usr/sbin/exim -oMr spam-scanned -bS" transport_filter = "/opt/dspam/bin/dspam --stdout --deliver=innocent,spam --user $local_part@$domain" use_bsmtp = true home_directory = "/tmp" current_directory = "/tmp" user = nobody group = mail log_output = true return_fail_output = true return_path_add = false message_prefix = message_suffix =
If you have set up authentication correctly as well, then you should be able to open [url] and log in - if you add your login details to the "admins" file, you can configure defaults, etc. It also allows ALL users (with 1 user being an email account) to log in, using www.yourclientsdomain.com/dspam/dspam.cgi
This will not work with suexec enabled!! This is because dspam needs specific permissions, and it is expecting user nobody to access it. If suexec is enabled, you will need to use the default host, and NOT virtual hosts (and even this may not work - testing still required).
Watch exim_mainlog after this - you should pick up what transports and routers are being used.
Dspam can really hammer a system - mysql, cpu and memory usage will go up a bit, especially on busy production servers. Monitor your servers performance.
Other settings: add /opt/dspam/man to MANPATH in /etc/man.config or move dspam man directory to an existing man directory.
[ADDED] This dspam.cgi hack will do a lookup in the cpanel config file to find the domain for any username without a domain, and append it on match (or leave just the username part if nothing is found). This requires unsecuring your system a bit - your http user will need to be able to read /etc/trueuserdomains (either chmod 644 or chown nobody):
Code: #add this just after $CURRENT_USER is set. if ($CURRENT_USER !~ /@.+./) { open(TUD, "</etc/trueuserdomains"); while(<TUD>) { my ($domain, $user) = split(/:/,$_); chomp($user); $user =~ s/^s*//g; if ($user eq $CURRENT_USER) { $CURRENT_USER = $CURRENT_USER . "@$domain"; } } close(TUD); }
That should do it
dspam will allow all messages through by default, and will require some training. With this config, users can train using email commands - all they need to do is forward any spam that hits their mailbox to spam-emailaddress@domain.com (their own email address with spam- prepended). Unfortunately this does not allow handling of false positives if you are using a "quarantine" policy instead of subject. the web interface comes in handy for this.
I am busy testing a combination of dspam with assp, which seems to be working well - I especially like the greylisting feature of assp and ProtectionBox... Will add to this howto when testing is finish.
I've seen a lot of requests for a simple howto dealing with bandwidth limiting/"capping" on Linux. I put together a howto yesterday on this which I hope you'll find useful.
Ifve recently optimized the scripts used for bandwidth management in one of our UK facilities and I thought Ifd post a quick howto on it.
The full script can be found directly here: http://www.adamsinfo.com/bandwith-li...oute2/#more-15
My setup here is a live feed entering eth0 on this linux router and leaving eth1 into a switch connected to a collection of other servers. This is set up as an unrestricted public router, routing between a /30 on eth0 and a /24 on eth1. Note: We canft in any way restrict the amount of traffic that eth0 receives from the outside, so instead we restrict how fast eth0 sends data out, the same applies the other way round. So, if we want to limit the amount of data that the local servers can send, we shape the routerfs external interface (eth0). If we want to limit the amount of data that the local servers can receive, we shape the routerfs internal interface (eth1)
With Debian Etch on 2.6.x, run: apt-get install tc iproute2 bc
Then script as follows: # Set some variables #!/bin/bash EXT_IFACE=heth0 INT_IFACE=heth1 TC=htch UNITS=hkbith LINE=h10000 #maximum ext link speed LIMIT=h5000 #maximum that wefll allow
# Set some variables for individual gclassesh that wefll use to shape internal upload speed, i.e. shaping eth0 CLS1_RATE=h200 # High Priority traffic class has 200kbit CLS2_RATE=h300 # Medium Priority class has 300kbit CLS3_RATE=h4500 # Bulk class has 4500kbit # (Wefll set which ones can borrow from which later)
# Set some variables for individual gclassesh that wefll use to shape internal download speed, i.e. shaping eth1 INT_CLS1_RATE=h1000 #Priority INT_CLS2_RATE=h4000 #Bulk
[...] A few hundred lines [...]
I have tried not to get bogged down with too many irrelevant details here and would be happy to answer any questions or take any corrections. Itfs pretty simple and it works well. Install bmon and you can confirm this yourself. The purpose of this is that I can take a 10mbit connection and limit the traffic to 5mbit ensuring that I donft break the 95th percentile that I want to maintain at the datacenter. I can increase and decrease this at any time as traffic requires or permits respectively.
We are planing to implement a spam appliance like the mailfoundry for our 60 cpanel servers.
What is the best and easiest way to replace the standard cpanel mx entry in the dns zonefiles with our two new MX entries?
Additionaly we need to enable the option "Always accept mail locally even if the primary mx does not point to this server." for all the dnszonefiles where we use the new MX entries.
The problem is, that some customers are using already own mx entries, therefore we can not change all of them, but only the entries which point to the cpanel server.
Does someone have a script for this, or how would you change this?
Here is the procedure to upload websites and their subwebs (subsites) with FP 2002/2003 Upload the website with FTP Install FP extensions Wait for the DNS to pullulate Open your remote website with FP Convert folders to subwebs as needed Upload (again) all your website files with FP An error message will appear: "cannot find a web server at <domain name> on port 80 ...." select <OK> Wait for FP to stop and a message "status unknown" will appear start uploading again A message asking something about replacing remote files will appear. Select <YES> Repeat the process for each subweb (it might take a while) At the end, you will find a status message: "Successful upload", or similar That was all
It works for some hosts with cPanel but I cannot be sure if it works for all
Some just require oppening the remote site with FP and convert the requiered folders to subwebs as neeeded.
I know Cpanel has some features to do this unfortunately i have a private lable Pannel that is why I want to move to a host that can allow me to move all my customers in and out as fast as I need to. There are many reasons to leave or find different hosting that is not the question the question is how to do this without having your customers go crazy or if posible to do it without them even noticing more then a short period of downtime late at night.
Please offer any opinions or directions on Pannel choice and methods to make the move seamless.
Mistakes are also very interesting And although we all know every hosting company is willing to help us do this and they are all nice guys it is important that things like this can be done fast and also without need for outside tech support All things are important like checking php versions and perl moduals and apache, mysql, phpMyadmin versions.. is setting up a dns3. and dns4. and asking customers to use that important for fast migration?
i have a dedicated server running plesk, and ive found that one site is using alot of apache processes, which is pushing up the server load quite a lot, so im wondering if anyone can tell me how to find out which site is causing the problems?
how to setup a cron job to copy files & directories from one folder to the root folder. I have CPanel X.
My root directory is public_html/ I have another directory public_html/uploads containing both files and directories.
I need a cron job that will copy all the files & directories from public_html/uploads to the root public_html/
If it helps, here is some system info
General server information: Operating system Linux Service Status Click to View Kernel version 2.6.22_hg_grsec_pax Apache version 1.3.39 (Unix) PERL version 5.8.8 Path to PERL /usr/bin/perl Path to sendmail /usr/sbin/sendmail PHP version 4.4.4 MySQL version 4.1.22-standard cPanel Build 11.17.0-STABLE 19434 Theme cPanel X v2.6.0
I have a website that was running fine for a month or two until my host recently changed some settings on the server, and now it shows a bunch of errors. I contacted the host and they said >
"To avoid the errors, please do not use disabled function. If you need such functionality, you can have your own php.ini on your root http folder containing only necessary option"
Since I'm not a programer, I have no idea what they're talking about. So, I asked them how to do that, they're reply of course was>
"Please consult with the script writer on how to convert ini_set function in your code to php.ini seting. As the script is not encrypted, you can do it with commenting all ini_set calls and write a substitute on php.ini (Create php.ini file in webroot folder)."
I tried to contact the developer, but it appears he has gone MIA! So, now I am left with no clue how to fix the website, so I turn to you guys!
The website is [url]. You can see the errors in the header, but I'll post them here as well>>
"Warning: ini_set() has been disabled for security reasons in /home/buymydom/public_html/includes/global.php on line 3
Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/buymydom/public_html/includes/global.php:3) in /home/buymydom/public_html/includes/global.php on line 32
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/buymydom/public_html/includes/global.php:3) in /home/buymydom/public_html/includes/global.php on line 32"
My question is, How do I convert ini_set function in my code to php.ini?
