Plesk 11.x / Linux :: Find Spam Relaying User?
Jun 20, 2014
I facing a serious problem with my qmail and plesk 11.0.9.I found the way spammer did with my server by listening everything on port 25. Maybe he know the RCPT hosts of mine, and they send emails with random username but with domain hosted on my Plesk. (user1@mydomain.com, user2@ my domain.com, ... userxxx@mydomain.com).
qmail only check domain in RCPT if spammer input:"mail from user1@mydomain.com" - (with out ":") - no email address on my server.then server reply: 550, no mailbox here by that name. (#5.7.17)
But qmail check username and domain if spammer input:""mail from: user1@mydomain.com" - (with ":") - no email address on my server. Then server reply: 250 OK..This is really weird! I tried with all my plesk server, this bug still effected.Click to expand...
View 2 Replies
ADVERTISEMENT
May 24, 2015
I just migrated a bunch of domains from plesk 11.5. Everything appears to be working well however when examining the maillog, I am seeing some strange errors... In this example, the message was delivered and had the spamassassin stuff in the header.
spamd: handle_user unable to find user: 'jason@xxxxxxp.com'
View 4 Replies
View Related
Apr 15, 2015
We have just had reports of SPAM being sent from our CentOS 6.x server running Plesk 12.
Services like Plesk Premium antivirus, SpamAssasin, watchdog(rkhunter) and mod_security are enabled on the server to enhance security and none of these seemed to stop the scripts.
The issue is that multiple domains are sending out mail from this server, so it is difficult to find the script sending out SPAM.
When we were running Plesk 11.0 we had a seperate log-file where we could see the file sending any mail going out from the postfix mailserver. I have check both /var/log/maillog and /usr/local/psa/var/log/maillog, but there is nothing in those files to tell me the file that sent the mail.
How would I go about finding this file from either the Plesk Control Panel or through SSH (using log-files)?
View 1 Replies
View Related
Aug 26, 2007
I have two domains that I recently "re-animated" and they are been used as spam relays. I get almost 2 connections per second, according to the exim log.
I use ConfigServer Security & Firewall http://www.configserver.com/cp/csf.html which can block IP's that exceed a number of SMTP connections per hour. But these are thousands of IPs and proxies. Is there anything else I can do?
View 3 Replies
View Related
Oct 15, 2014
I imported backups in Plesk 12 from Plesk 9.5.4.
I can access 4 out of 5 domains in my subscritions, but one domain dosn't appear in the list.
The 4 working domains are "Default Domain", the one i can't access is "unlimited".
In the list of packages i can click on the number of subscriptions and see the domains, but if click on the 1 unlimited subscription nothing gets listed / no elements found.
The domains is online, but i can't access it with plesk.
View 1 Replies
View Related
May 26, 2015
The APSC database was corrupted, so i used :
/usr/local/psa/bootstrapper/pp11.5.30-bootstrapper/bootstrapper.sh repair
to repair the databases. Worked, but give me the error
"Table 'aps_resource' doesn't exist"
One more time, i recover this table from the newest backup existing. But now, give the error " Can not find registry resource for Application ID" for one domain - I have 3 domains, 2 are working, one not.
View 3 Replies
View Related
Jul 14, 2015
I have just installed a new Cloudlinux 6.6 Plesk 12 box but am unable to find the additional PHP versions as shown in the attached image.
I'm on update #55.
I'd prefer to use Plesk's built-in PHP versions instead of the Cloudlinux ones.
View 4 Replies
View Related
May 15, 2014
I cannot find my files after deploy war files..
I need to create a directory after unpacking war file process..
I need to know where is my files in server..
View 1 Replies
View Related
Jun 25, 2014
I'm migrating from Plesk 9.5 (Centos 5) to Plesk 12 (Centos 6).I found this in the migration.log file: [24124]: 2014-06-25 14:27:20 DEBUG Unable to find 'pigz', trying 'gzip'
I've installed pigz from Plesk repository and I can execute pigz in the shell, but definitely Plesk Panel doesn't use pigz.I tried with pigz from EPEL repo and the log showed the same error. I also tried to move the binary from /usr/bin/pigz to /bin/pigz and It didn't work.I'm interested in using Pigz to improve the speed of migration and backup.
View 4 Replies
View Related
Oct 6, 2014
I have completed email set up on my server and have checked that email ports are open, but for some reason outlook keeps returning : "Outlook cannot find the server. Verify the server information is entered correctly in the Account Settings, and that you DNS settings in the Network pane of System Preferences are correct."
The odd thing is that outlook still picks up emails if I receive any, but keeps returning above error every minute.
View 1 Replies
View Related
Nov 18, 2014
When you perform a migration, Plesk gives me this error. For more I search, I find what may be the cause.
Error: Unable to find domain with name 'e-domain.com'[2014-11-18 19:41:31] ERR [panel] exception 'PleskObjectNotFoundException' with message 'Unable to find domain with name 'e-domain.com'' in /usr/local/psa/admin/plib/Domain.php:950
Stack trace:
#0 /usr/local/psa/admin/plib/backup/Conflicts/PleskDataManager.php(1278): Domain::getByName('e-domain.c...')
#1 /usr/local/psa/admin/plib/backup/Conflicts/Resolver/UnfitSettingsResolver.php(500):
[Code] .....
View 1 Replies
View Related
Apr 27, 2015
I have formatted my server and tried to install PLESK 11.5 (I have my license every thing). But after I start to install with current AutoInstaller there is only PLESK 12 to be chosen.
How can I install my PLESK 11.5 BACK with Current AutoInstall? Is there anyway to have an option to install 11.5 in the Installation Selection?
View 1 Replies
View Related
Nov 13, 2008
31015 100 15 0 151m 35m 5156 S 28 0.4 379:34.10 /usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql
This is my top process, I have quad core server and because of this server load is over 10
I am using cPanel, is it possible to trace which user is using all this cpu?
View 6 Replies
View Related
Oct 16, 2014
We are running the latest Plesk 12 under CentOS 7.
While I can see the App Owncloud as Admin in the Application Vault my users cannot see that particular app in their Application pool. They can see all other apps though. Just not Owncloud.
All resellers and customers are allowed to install everything from the pool and i selected Owncloud in the Vault already and "made it available" .. Though it is not shown.
View 7 Replies
View Related
Aug 25, 2014
On a couple of domains I get this error if I click on the domain in the domains option or in the Subscriptions list.
Unable to find row by field login with value domain.com in smb_users table.
How can I fix this?
View 1 Replies
View Related
May 11, 2009
Does anyone happen to know how to find the current bandwidth usage for users in CPanel via SSH? I found disk space, which is /scripts/dumpquota, but I can't find the bandwidth.
View 8 Replies
View Related
Feb 1, 2009
I have a web blog that shows promise of growing pretty big soon! This is a vbulletin whith chatbox and arcade games. The forum is for gamers and game modification talk. I want to keep my features such as in forum mp3 player for streaming music. I host no files everything is linked from outside sources. Even photos are linked from photo hosts. I forsee about 20-30 members on at all time browsing and chatting in chatbox. Playing in the online arcade!
I have no idea how much bandwidth all this will use up. I do know that 20-40 gig of space should be quite enough but as always I want all I can get. As far as bandwidth I have no idea what all those features will eat up.
I have looked at fatcow.com and talked to them they said their unlimited is this 300gig space 3000 gig bandwidth and they do not keep up with msql databases. I looked on BBB and they have an A+ record if compared to hostgator they have unsatifatory! The only problem is they are yearly contract only. I do not trust this! I also have to let them re-bill me at end of year and this gives them access to my account. The payment options are check,paybal, or credit.
View 9 Replies
View Related
Oct 31, 2009
I found a spam script running in the processes under apache as ky.pl. But no matter how
I search I can't seem to find this file, anyone know what is the procedure?
View 3 Replies
View Related
Mar 20, 2015
I have manually removed a user from the Ubuntu OS. The user isn't present in the Plesk-UI too.On my Vhosts SuexecUserGroup is still set to this non existent user. So the apache can't restart...
Apache message:
bad user name xxx
Action 'configtest' failed.
Are there corresponding UI-fields in Plesk or can I edit any Plesk-Db-Table to fix this?How is SuexecUserGroup set by Plesk?
View 2 Replies
View Related
Mar 27, 2009
I have a dedicated server, the server itself is secure (as far as I know) and I run lots of my sites from it. I offered a friend hosting for his flash based chat application he built.
Today I was contacted by someone; "Are you the owner of xxxx.net?" so I informed that yes, it was my server and they then showed me an email they'd received from my server. I did a search and apparently someone uploaded mail.php and a couple of files it was using to send out spam based upon a variety of conditions that the other files met. The files contained forenames and surnames, it'd use a forename and a surname then send it to popular free mail services. The email contained ramblings about new world order and promoted a website.
How can I find out how they got the files uploaded to the account and what action can I take? I checked the whois for the domain and have their contact information, however it's a large site so I'm doubtful that the owner did it. I don't want my servers IPs being blacklisted for spam :|
View 3 Replies
View Related
Jun 30, 2014
When trying to access the settings for mail on a domain I get the following error:
Error: Unable to find service node for ip address with id=6
I understand this is a problem with the database but I am not sure where to look to fix it.
I only have 4 IP addresses on the system.
View 2 Replies
View Related
Feb 10, 2015
I've been messing about a lot recently and I've had to rebuild my VPS template a lot in the past month. For some reason, Plesk is finding user data from a bunch of previous instances, so I've got to a point now where it's saying users exist when they can't be found in the panel interface.
I don't know how my VPS provider's infrastructure works but I'd presume that when I rebuild the server it's a total new instance and no data should carry over.
Is the the user data stored locally, and how would I go about clearing out the obsolete data?
View 1 Replies
View Related
Jul 1, 2015
Is it possible to set the subscription shell option of an subscription via xml api? I see it is possible via cmd "/usr/local/psa/bin/subscription -u {subscription} -shell /usr/local/psa/bin/chrootsh" But how is it possible via xml api?
View 1 Replies
View Related
May 15, 2015
I need to create a SSH account for an subscription. This account is not allowed to access other domains. How do i do that?
I know how to create an SSH account with remote access.
View 1 Replies
View Related
Nov 2, 2014
I use Plesk 11.5.30 on my vServer. I created a new domain with a new web user and /bin/bash (chroot) setting. I can't login with a SFTP connection to this domain only normal FTP connection works. With existing users I don't have this problem.
View 1 Replies
View Related
Jan 19, 2015
We have a website under httpdocs/. We can change/delete files with a ftp user : "ftpold". All is ok. We must create another ftp access for another company which can access only to httpdocs directory (not to logs/, error_docs/...).
So we have create a ftp access in Plesk. But with this ftp connexion, we can not update/delete files ou update rights.
So we decide to change rights on the files/directories under httpdocs with the new ftp access :
httpdocs# chown -R ftpnewsacln *
The is no errors but the files:directories are always with the old ftp user :
httpdocs# ls -l
ftpold psacln ... libs/
ftpold pscln ... index.php
Why ? How can i create another ftp access ?
View 3 Replies
View Related
Jun 30, 2014
I have a virtual server linux with Strato. When I have upgrade from 11.5 to 12.0.18 in spanish I have seen that I can´t add a new domain in power user. The user has ilimited domains and I have less that 10 domains. I see the buttom of "add domain" as in 11.5 and appears all the fields to complete, but there is not buttom to accept o decline. There is no problem with alias or subdomain. I have reinstall 11.5 and dissapeared the problem, but when I upgrade again to 12.0 this buttom doesn´t appear.
View 1 Replies
View Related
Jan 30, 2015
I'm running a brand new installed VPS with CentOS 6.6 and Plesk 12.0.18. I created a subscription and by default a FTP user is created. However, I cannot login with these credentials. I also created a new user but the same problem presists. I'm 100% sure that the username and password is correct.
Filezilla gives me and 530 Login incorrect. But if I look at the /var/log/secure file, I see this odd message (FTP username = test):
Jan 30 16:01:45 transip proftpd: PAM unable to dlopen(/lib64/security/pam_stack.so): /lib64/security/pam_stack.so: cannot open shared object file: No such file or directory
Jan 30 16:01:45 transip proftpd: PAM adding faulty module: /lib64/security/pam_stack.so
Jan 30 16:01:45 transip proftpd: pam_listfile(proftpd:auth): Couldn't open /etc/ftpusers
Jan 30 16:01:45 transip proftpd[18085]: 127.0.0.1 (x.x.x.x[x.x.x.x]) - USER test (Login failed): No such user found
No such user found, although it is created with Plesk.
View 10 Replies
View Related
May 28, 2015
How can I create an FTP user read-only in plesk 11.5?
View 1 Replies
View Related
Mar 14, 2008
Not far ago somebody hacked our customer account through the vulnerability in phpBB Album module and uploaded some scripts. Then it started to send nigerian spam using exim and apache. These scripts were found and deleted and the Album module was fully deleted too. But when I look at the processes now I see that exim and httpd still start very often so the system resources are probably overused by them ......
View 7 Replies
View Related
