I have a weird problem happening to only few of my domains. From web browser, any of URL below is working fine:
webmail.domain.com
ftp.domain.com (it will open up a new window asking for login info)
domain.com:8443 (it will redirect to control panel login page)
However, URL below not working:
www.domain.com
domain.com
I have checked the DNS entries, all looks alright. I even initiate DNS test from dnsgoodies.com and it return fine.
I have fail2ban and try to install http-get-dos rule. but I have no way to make it work.
Here are my files :
# cat /etc/fail2ban/filter.d/http-get-dos.local
[Definition]
failregex = ^<HOST>.*"GET
ignoreregex =
[Code] ....
Then, when I start fail2ban, I have this thing :
2015-03-24 00:33:25,473 fail2ban.jail [7070]: INFO Creating new jail 'http-get-dos'
2015-03-24 00:33:25,473 fail2ban.jail [7070]: INFO Jail 'http-get-dos' uses Gamin
2015-03-24 00:33:25,474 fail2ban.jail [7070]: INFO Initiated 'gamin' backend
2015-03-24 00:33:25,475 fail2ban.filter [7070]: INFO Added logfile = /var/www/vhosts/mydomain1/logs/access_log
2015-03-24 00:33:25,476 fail2ban.filter [7070]: INFO Added logfile = /var/www/vhosts/mydomain2/logs/access_log
[Code] ....
So, I do not understand where is coming from the set max... then, in my iptables, I have all the Chains, but not the http-get-dos one :
# iptables -L | grep Chain | grep dos
and finally, I made some stress test, geneating more than 5000hits in 5 min, and no luck, nothing.
If I run failregex :
# fail2ban-regex /var/www/vhosts/mydomain1/logs/access_log /etc/fail2ban/filter.d/http-get-dos.local
Running tests
=============
Use failregex file : /etc/fail2ban/filter.d/http-get-dos.local
Use log file : /var/www/vhosts/mydomain1/logs/access_log
Results
=======
Failregex: 55044 total
|- #) [# of hits] regular expression
| 1) [55044] ^<HOST>.*"GET
`-
Ignoreregex: 0 total
Date template hits:
|- [# of hits] date format
| [55429] Day/MONTH/Year:Hour:Minute:Second
`-
Lines: 55429 lines, 0 ignored, 55044 matched, 385 missed
Missed line(s): too many to print. Use --print-all-missed to print all 385 lines
Did I miss something in fail2ban configuration ? is there any pb to add custom rule to fail2ban in plesk ?
I have bought ssl certificate but if I open my site I think it is redirect to http because I dont see https. I use nginx like web server.
View 13 Replies View Relatedhow can I make a redirect traffic to the site that I have over HTTPS in HTTP? Disabling SSL 404 using Plesk 11 with nginx + php-pfm
View 2 Replies View RelatedWe will be migrating from plesk 9 to plesk 11 and I am having some trouble finding a fix for something. Previously, http and https could either share a directory or have split directories (httpdocs and httpsdocs) for a site. Now all I see is httpdocs and I can't find a way to have separate directories.
View 6 Replies View RelatedI'm trying to redirect users to database/mail management pages with automatic login link, while logging in part works ok, I have issues with redirections.
Plesk is installed on different server than my site, and if I try to use "success_redirect_url" param in link url, it will show this error "Original link and target URL should be on the same domain."
It works ok if I prevent browser from sending http referrer to plesk, but I'm not sure if it will work for all user as this depends on their browser.
Is this a bug? Is there a workaround that would not depend on used browser?
the hostname is www.domain.com also in the serversettings of plesk. When we go to http://www.domain.com:8443 we become redirected to https://www:8443. The only way to connect to plesk is to use https the redirect from http doesnt work.
View 1 Replies View RelatedMy Linux (CentOS) server with Plesk 12 is giving HTTP 414 errors ("URL too long") in response to URLs which are over 256 characters in length. They happen to include a GET variable in the query string which accounts for most of this length, and if I shorten it manually, it works. But I can't change the script to submit a shorter URL or send it by POST, because it comes from an external payment processing server which I don't control.
Adding the following lines to my /etc/httpd/conf/httpd.conf file and restarting Apache does not work:
LimitRequestLine 8190
LimitRequestFieldSize 8190
The URLs I'm trying to use are well short of 8190 bytes; they are around 800 characters long.
Is this something that Plesk affects / can control? Is there a way to see what the current maximum setting for URL length is, and to change it?
After installing a RapidSSL certificate in a subdomain, https redirects automatically to http,
Plesk 11.5 with debian and last version openssl
Why https redirect to http when I setup the certificate?
I migrated domains from another server and they had separate http and https folders. Now I need to make them use same httpdocs for both http/https. How do I do it for a single domain? How do I batch do it for all domains?
View 4 Replies View RelatedI'm using a turnkey image for smallmachineforum system, installed on amazon aws instance.
In the default configuration I can't use the http version of the site, only the https.
It does not seem to be a network issue, a telnet on port 80 opens.
The server is apache version 2.2.22, on a Debian 3.2.57-3+deb7u2 x86_64
After installing a separate SSL to domain.com and www.domain.com, for some reason host.domain.com, which is the subdomain for plesk login, isn't being secured by FTP when choosing "Secure Plesk" after choosing the correct SSL. No error occurs, nor does the dashboard respond to it. It stays the same and unsecured. I tried rebooting server, restart services, etc.
View 1 Replies View RelatedOS: CentOS 6.6
Plesk: 11.5.30 #48
ProFTPd: 1.3.4c
I am unable to connect over TLS/SSL using my FTP client. I have ports 989 & 990 enabled in my server's firewall. My FTP client is attempting connection on port 990, but times out waiting for the server to respond. I also tried adding "TLSProtocol TLSv1" or "TLSProtocol SSLv3" to /etc/proftpd.conf, but get the same result, except that a non-TLS/SSL connection attempt then returns "server closed the connection".
Recently I configured parallels 12.x on Linode Cloud with cent OS. Using DNS Settings I added 'A' record (abc.example.com) as abc and point to IP. But the record is not propagated after 24-48hrs.
View 2 Replies View RelatedConfiguration:
Config server / Preferred domain for web sites / domain.tld
Config hosting to domain / Preferred domain / domain.tld
Problem: I've created a primary domain.tld and work without problems I type www.domain.tld and work fine redirect to domain.tld format but I've created different alias and only work www.domain.tld format don't work domain.tld format.
In google webmastertools i see this error in domain.ltd panel
Redirect
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 22 Aug 2014 18:09:28 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Location: http://www.domain.tld/
X-Powered-By: PleskLin
MS-Author-Via: DAV
Vary: User-Agent
How can solve to Alias work with domain.tld format?
I have two servers with the exact same configuration, besides from the version of CentOS that they were running when I deployed Plesk using the autoinstall script. My first server was running CentOS 6.5 during Plesk installation. My second server was running CentOS 6.6. No 3rd part repos were installed before Plesk.
On the first server everything is fine, but on the second server I have issues with FTP. I have tried applying this fix: [URL] ....
Before applying the fix I got 530 Login incorrect when trying to connect to FTP. After applying the fix and restarting the entire server I got 550 /: permission denied
I running magento on plesk 12 and trying to configure nginx, but only home page is working and all other pages are not working with error 404.
View 6 Replies View RelatedI have an Issue with API.
I have mine Custom billing Panel Today my Developer start code API for it by Docs that Parallels given but we got stuck on Subscription...
if we set login name and password
API shows this error
While creating subscription
Error 2204 Unable to update hosting preferences. Unable to check system user existence: login name is empty
It happens only while creating the subscription...
Creating of user is working fine only subscription don't want work and we don't know why we tried many things and none of it works.
I have set up a CentoS 6 & Plesk 12.0.18 server as master and a reseller. I enabled the shared IP under IP address in the tools section.
I then added a customer and domain. then I added reseller with domain and 2 customers with domain under that. I changed the nameservers at registrar to the IP of the new server. When I use the control panel and under each domain I use the PREVIEW and each domain shows the index.html file I uploaded. When I choose OPEN it opens a new window to the domains address and I get webpage not found. And yes it has been almost 36 hours since the registrar change in case you are wondering.
Is there a setting I am missing or is the server set up wrong? Why wont it show the webpages as it does in the previews?
We just upgraded from Plesk 10.4.4 to 11.5.30 and can't seem to get FTPS to work.
I presume it should be running on port 990, but the server is not listening on that port (only 21 for FTP).
Code:
netstat -lptu | egrep 'ftp|990'
tcp 0 0 *:ftp *:* LISTEN 20354/xinetd
We've enabled FTPS on the Server > Security Policy page.
I have a VPS on Webfusion which auto upgraded last night to Plesk 11.5.30 #45. However, I used to have the domain registrar, 123-reg manage my DNS & now since the upgrade I've lost access to all emails & ftp access but the domains still work ok.
whether I should delete all DNS records at 123-reg & point to my VPS now? The DNS parameters in Plesk appear to be different to 123-reg. I
Since moving to version 12 on the remote FTP backup is not working.
This makes the tar of 50K ~
We have chosen "Setting and content domain" ...
Since the migration from Plesk 11.5 to Plesk 12.0 the "chrooted" SFTP accounts do not work anymore. Along with the Plesk migration we have changed the operating system too. We've migrated from CentOS 6 (x86_64) to CentOS 7 (x86_64).
When trying to connect using SFTP on the command line I get the following error message: debug1: Exit status 127...When using an SFTP client such as WinSCP I get logged out immediately without any message.
The OpenSSH configuration is saying:
<...>
Subsystem sftp /usr/libexec/openssh/sftp-server
<...>
The mentioned binary from above does exist:
ls -l /usr/libexec/openssh/sftp-server
-rwxr-xr-x 1 root root 83984 2015-05-12 21:41:56 /usr/libexec/openssh/sftp-server
I have attached the debug output of the SFTP command (plesk_sftp_issue.txt).When I change the option "Access to the server over SSH" to "/bin/bash" the SFTP access works again. But when "chrooted" it stops working.
Plesk 12 under CentOS 7?
Yesterday we upgraded V.11 to V.11.5.30. And now we are not able to restore our backups anymore from our main server on our failover server by CLI (we have automated this with cronjobs and need the CLI backup/restore). We have a failover sulotion with two servers and restore the backups of our main server on our failover server!
If we try to create the map file on our failover server, we get the error:
The dump specification '/home/backups/plesk_partnerserver/dumps/backup_info_1308030132.xml' should be inside of dump directory '/home/backups/plesk/dumps'.
/home/backups/plesk_partnerserver/dumps is the path on our failoverserver where we store the backups of our main server and /home/backups/plesk/dumps ist the regular dump path of the failover server.
And if we try to restore the file without creating a map file on our failover server with /usr/local/psa/bin/pleskrestore --restore backup_info_1308030132.xml -level server: Unable to resolve all conflicts
What happend? Now after upgrading to 11.5 our backup- and failover-solutions are in big trouble!
Our OS is Debian Squeeze
PP is 11.5.30
I am running Plesk 12 on CentOS 7 64bit. I have set up the server backup instead of the website backup as I assume that will backup all server settings, as well as the website? I am running Plesk Web Admin Edition.
I have the backup set to run and dump into Personal FTP, but it does not run. If I run the backup manually, everything works great, but the scheduled backups don't work.
I have created a scheduled task as per my application guide as in the attached file. When i recieve the email it says the following:
: /var/www/vhosts/testdomain.co.uk/clients/admin/cron.php: No such file or directory
i have also tried appending:
php -q
wget -O (using the http to the location to cron.php)
Nothing seems to work.
I have transfered from cpanel and this is my first scheduled task and not getting anywhere with very little information on how to do this.
Im running:
Plesk 12
Linux
For some reason non-exisiting/delete FTP accounts still have access to the server. When I tried to delete the account, it gave an error stating that a process is using it, however, it was not being used at the time. From there, the ftp account was removed from the list, but for some reason it can still log in as if it exists.
View 4 Replies View RelatedWhen I modify rules using the firewall panel it is not generating rules correctly when selecting allow from selected sources deny from others.
View 2 Replies View RelatedIt seems that SA is not using bayes on the incoming messages. How to get bayes to work?
I have trained with plenty of ham and spam. Where are the db files for global bayes located?
OS: CentOS 6.5 (Final)
Panel version: 11.0.9
I can receive email and check them via Horde but i'm unable to get them forwarded to my gmail account.Is there anything i can check/do ?I'm an ex-cpanel user.
I have a server which I am using for multiple clients. Some with SSL enabled, some without. I have added custom ngingx conf files for nginxDomainVirtualHost.php and nginxWebmailPartial.php in /usr/local/psa/admin/conf/templates/custom and modified the following lines to try and harden security:
Code:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
ssl_prefer_server_ciphers on;
After reconfiguring using
Code:
/usr/local/psa/admin/bin/httpdmng --reconfigure-all
I check in /etc/nginx/plesk.conf.d/vhosts/<domain>.conf and the changes are shown correctly there but browsers and online tools such as [URL] .... still say that the sites are using 128 bit encryption and TLS 1.0.
The Plesk admin panel itself displays 256 bit encryption and TLS 1.2.
