I are running an Plesk 11.5 on a Ubuntu 12.04 machine. Since days i have problems where i see scripts of phishing sites and mailer scripts installed in the httpdocs directory of various domain.
How I can prevent that people outsiders install this scripts on the server? Where is the bug that allows this?
One day, you noticed that someone remotely connectted your computer and an application sends spam/phishing emails bu using your IP. What do you do?
Of course, I stopped the program and blocked remote connection for a while and changed my password... I any way, i have to connect my computer remotely... What do you advice?
By the way, i have more than 1000 email accounts on my computer. Hacker left me a gift, but I don't need them))
I have a Plesk v12.0.18_build1200140606.15 os_CentOS 6 server. using postfix
And Lots of spam is send from my server.
I tried: [URL] .... but with no results.
on the moment the /var/log/maillog file is over 5,5GB
and the /var/log/maillog.processed is over 7,2GB and splitted into multiple .gz files
What can I do to find the source of the problem and stop it ?
Somebody is sending spam from my postfix server.
How can I locate the domain causing the problem?
Does Parallels support Plesk 12 being installed on a Linux VM that is provisioned on Microsoft Windows Server 2012 R2 Hyper-V?Is it fully supported?
View 2 Replies View RelatedI have a problem with Parallels Plesk 12 Web Host Edition. In the dashboard, Plesk tells me that Spamassassin service is not running and not installed.
How to setting up it ? Is there a component, a service to buy, or do i have to configure it through SSH ?
I've installed PHP-FPM into Plesk 12 and it is showing as a running service. However I can't find any way of enabling it per site at all. I'm still just getting the 3 standard PHP options:
Apache module
CGI application
FastCGI application
The documentation states the option would be available on a per-site basis but it isn't.
i've uninstalled nginx and php-fm from plesk panel.but phpmyadmin info still showing it is running on nginx 1.6 and while uploading sql file i'm getting 503 gateway error.
View 3 Replies View RelatedI've enabled one more php using this guide: [URL] .... but mysql is not working with the new php installation, how to get it working?
View 7 Replies View RelatedIn the list of available webmail clients there's only Horde. Why don't I have Roundcube? I thought it's preinstalled with Plesk 11.5 and higher.
When accessing Horde webmail, the page never loads till the end and all I get is the top menu, no e-mails.
i am relatively new to Plesk, i ordered a vserver with Plesk a couple of months ago and spend a lot of time setting everything up and developing several new websites. I am used to developping new websites on a hidden adress (sth like domain.com/dev/ instead of the top level) and then switch the document root to point to the hidden directory when all is done. This practice has served me and my clients well for the last 10 years.
Using the Plesk features like built-in applications seemed like a good idea at the time but wanting to switch the new websites live i have now found out that Plesk won't let me do this since..It is impossible to change document root because there are web applications installed on this website.
I had read somewhere on the interweb that the v12 would let me do this so i just spent the better part of today updating to v12 .. but alas no luck, the limitation is still there. Is there a way to remove this limitation ?
I wanted to permanently get rid of xcache from my Plesk 12 as some softwares we are using crashes if xcache is installed or enabled on server.
At present I am doing yum remove to remove xcache php extension from server which is allowing our software to work but after couple of days, its coming back again.
I found traces in autoinstaller log, but I am not sure how to completely disable only xcache for all php versions installed on server i.e. PHP 5.3, 5.4, 5.5
I have a file that creates subscriptions , customers and domains. moreover, also installed wordpress to new domain. it makes it through the php file .
The problem I have is that when installing wordpress on plesk domain is installed in a subdirectory called wordpress in the root directory instead .
Is there any way of changing the php file that is installed directly to root ?
Ask this because from the plesk panel is done, there is an option through the file but can not.
I tried adding an apache service node to PPA Admin Node.
I referred to the specs at [URL] ....
Specifications of the Apache server node are:
RHEL 6.4 64bit
RAM 3GB
CPU 2.5GHz
Free Space 18GB
Ports Opened:
80, 443: HTTP, HTTPS
8352-8999: Communication between a service node and PPA panels
22: Communication through SSH
20, 21: FTP connections
But when I tried adding it as a service node, PPA says The Linux platform installed on the remote host 'xx.xx.xx.xx' is not supported. Please, check the list of supported platforms.
how to setup pre-installed wordpress themes and plugins so that customers can have them as soon as they auto-install wordpress? I am sure the files are stored somewhere, but can't find it.
Also, any way to disable the auto-install wordpress link from domain.com/wordpress to just domain.com? Some in-experienced customers will have a hard time since they wouldn't understand that selecting custom is the way to go.
I just installed the Health Monitor add-on in a brand new Plesk 11.5.30 on CentOS 6.4 but all that it's area in Plesk displays is this funky looking error:
{"status":"error","statusMessages":[{"status":"error","class":"","content":"Unable to load configuration file.Click to expand...
"What anti-virus do you use on your postfix email server powered by Plesk?".Is there an anti-virus program that can be installed on Plesk version 12.0.18 as an extension or component? I need it primarily for protection of incoming email from malware.I've seen in Add or Remove Components in the Mail hosting features that I have installed Kaspersky antivirus, but I didn't seen anywhere that it actually can be configured from within Plesk. It also, as far as I can see, doesn't do anything. what is Kaspersky antivirus used for in Plesk and how can I configure it?
View 2 Replies View RelatedHow do I go about finding if a certificate is installed on a Linux machine?
View 1 Replies View RelatedI have a Server with Centos7 + Plesk 12 and in the service configuration say that the Bind service is not installed, from command line i have install named services and make a manual configuration the first domain, but when I return to the service page in plesk... the problem is the same, the Bind Service is not installed; then the problem is when i want create a new hosting i need to go to the ssh to make the DNS configuration...
View 1 Replies View RelatedI run a Free web hosting service on my server with XPanel script installed. It has around 47K accounts in all. Recently i started getting mails from e-bay, banks and many other institutions regarding the Phishing sites operating from my server for cheating their customers / members. Though i removed them but i have to do it manually and after getting mails from them.
Now that i dont want any more such site to run from my hosting site, What are the options available for me in order to check all accounts automatically and remove any such site on its own? As there are 47K accounts and 100+ new signups each day, it is not possible to check all accounts manually.
I want any script / addon which can check all possible Phishing / Spamming / Spurious / Fraud sites and intimate me/ delete them upon request. Any person using such services? I need your guidance + support.
Looking for some fast and effective answers from experts here.
I have Spam in the Mail Queue.
How can I detect, where it come from, or how can I avoid it ?
Today in a plesk 12 with mail control (20 mails per hour per mailbox) a spammer stole a password of a mailbox and send nearly 1000 mails in two hours.
How can it is possible? Also in the stats I see 0 mails sent. In the logs (var/log/mail.log) I see the spam wast sent from a mailbox...
I have 5 Linux Plesk 12 servers, and I use Spamassassin, usually at a sensitivity of 2 or 3, I also use the following DNS
Blackhole lists: zen. spamhaus. org;b. barracudacentral.org;abuse.rfc-ignorant.org;cbl.abuseat.org;bl.spamcop.net;nomail.rhsbl.sorbs.net
But all of this seems to have minimal effect. I examine spam that comes through which looks very obviously like spam, but Spamassassin gives it a very low score, usually in the negative numbers.
Is SA just not as effective as I thought? Seems like if Gmail, etc can filter spam so effectively, then why can't SA? If there's something I'm not doing right, or what you all do to combat spam with Plesk 12.
My server is saturated in SPAM e-mails being sent from it, however I am struggling in tracing the root of this problem. I have now exhausted 4 IP addresses and our provider is blocking port 25 automatically on a number of occasions now.
I have used the KB article: [URL] .... to trace the highest senders of e-mail, however this has proved to be unsuccessful in finding "all" of the offending domains.
I have suspended e-mail and domains on a number of subscriptions due to the high number of e-mails being sent from the system. I have also enabled outbound mail control and set limits to 10/hr however there are domains attempting to exceed this on an hourly basis. I have investigated these subscriptions but am not able to find anything offending. Is there any feature within plesk that can show me exactly where the spam is coming from...
I am dealing with a situation which i cannot understand. I am running an website for a resort and occasionally i am sending e-mail stop the people who book villas using the website. By occasionally i mean last year i sent 2 e-mail campaigns with a proper spam score.
However, at this moment, even the e-mails that i receive from the website's contact form arrive as Junk into Gmail for example.
Domain abc.com is hosted on our server, it has a hosted e-mail 123@abc.com. This e-mail adress keeps getting SPAM messages from an address abc@srv2.xyz.com (where srv2.xyz.com is our server FQDN). What we understood by reading the headers (posted below) is that someone is sending an e-mail to support@abc.com. This e-mail adress, as configured in Plesk, redirects e-mails to 123@abc.com. But we don't understand how someone managed to send an e-mail from an unexistent abc@srv2.xyz.com to it.
Here are the headers:
DomainKey-Status: no signature
Return-Path: <Coulter_Faustinoa1@aspli.com>
X-Original-To: 123@abc.com
[Code].....
I just did the update to 12.0.18 #6 and everything seemed to go pretty well. One feature we were really interested in was the Outgoing Spam Filter. Unfortunately, the error I see when I go to that feature reads, "Protection : Not active. There are some problems that prevent the service from being started."
When I Google that error, I'm brought to some KB articles but they are all for the older Outgoing Spam Filter that you need a license key for. I don't believe that is the case any more - if it is, I don't know where to get the key. I will say point out I'm a bit of a Linux novice (we are running CentOS 6.5 on this server), so I'm not really sure where to look....
I'm getting a big problem on my server.
From 1 week until now I got 4 spam attacks. The attacker is the same, because the emails sent are iqual.
The technique is also the same, they use an email account (compromissed password) and send emails through smtp server.
When I detect the attack, i do:
1. identify the compromised account
2. Change password from the compromised account
3. Stop qmail
4. Clear queue with qmail-remove
5. Start qmail
The problem is that they already used 4 diferent domains since the first attack. So, here is my problem, how do they discover the passwords?! How can I solve this problem? I have hundreds of emails accounts and can't change it all.
CentOS release 5.10 (Final)
Plesk 11.0.9
I have a hard problem with my VPS. I have postfix as mail server on plesk 12 under ubuntu 12.
I dont know why the outgoing mails of all my domains in my servers are getting spam in servers like gmail, yahoo, hotmail...
I'm using mxtoolbox to fix errors and warnings and finally fixed all of them, but my mails are still outgoing to spam.
In mxtoolbox actually I have no mail server errors / warning, u can see it with, for example, this one of my domains: [URL] ....
Headers:
This message is an automatic response from Port25's authentication verifier service at verifier.port25.com. The service allows email senders to perform a simple check of various sender authentication mechanisms. It is provided free of charge, in the hope that it is useful to the email community.
[Code] ....
I facing a serious problem with my qmail and plesk 11.0.9.I found the way spammer did with my server by listening everything on port 25. Maybe he know the RCPT hosts of mine, and they send emails with random username but with domain hosted on my Plesk. (user1@mydomain.com, user2@ my domain.com, ... userxxx@mydomain.com).
qmail only check domain in RCPT if spammer input:"mail from user1@mydomain.com" - (with out ":") - no email address on my server.then server reply: 550, no mailbox here by that name. (#5.7.17)
But qmail check username and domain if spammer input:""mail from: user1@mydomain.com" - (with ":") - no email address on my server. Then server reply: 250 OK..This is really weird! I tried with all my plesk server, this bug still effected.Click to expand...
So, I have been searching everywhere online and have not come to a fully working conclusion with the issue regarding outgoing emails going to spam via gmail, hotmail, etc.Domain keys are activated, but it seems that domain keys is deprecated, making it useless when it comes to spam detection for email servers such as google, aol, etc.
The only alternative found was here: URL.....But that means that every customers DKIM will have to be created manually via command line. This would be a mission when having over 500+ ongoing customers signing up.Will you guys be implementing DKIM automation for Plesk? I am pretty much against trying to use c(p)anel + Centos and just love Plesk. So I prefer Plesk any day..