I know they're just self signed certs on the postfix mail servers used in PPA, but how can I renew them, customer was cautious about it once they saw it had expired.
I have found this: [URL] .... and was wondering is this the correct procedure to update the SSL cert?
I use Plesk 8 and one of my site's SSL certificate will expire at July 5. So I need to renew it now. The SSL certificate was ordered from Godaddy and I've already got two new cert files form Godaddy: my-domain.crt and gd_bundle.crt. What should I do now?
View 6 Replies View Relatedanyone can tell the right way to renew SSL certificate? if possible, a way that won't be alerting users that the certificate has changed
View 7 Replies View RelatedI connect to my email on my dedicated cpanel/whm server by TLS/SSL (similar to instructions here: [url]..same ports, etc.)
Today I login & get a "This server's certificate expired"
But it didn't. I purchased a NEW one June 1st. Why is thunderbird grabbing my old ssl cert? The website's https:// works perfectly.
I also checked the server ssl self-signed certs and all are up to date.
Is it possible to enable postfix address extensions while still having "What to do with mail sent to nonexistent users" set to "Reject"? I am trying to get confirmation to work where we have:
Code : user@domain.com
as a valid mailbox. I want emails addressed to
Code : user+confirm+2945o2419485@domain.com
to be also delivered to user@domain.com. But its being blocked by the plesk delivery service. Is there a way to get around that? FYI - the numbers are dynamically generated, so setting up an alias for that specific address will not work.
I see in the maillogs a number of errors lots of different Certificate Authorities - and some I really did NOT expect to see here:
[root@web48002 admin]# grep ' certificate verification failed for' /usr/local/psa/var/log/maillog | wc -l
998
[root@web48002 admin]# grep ' certificate verification failed for' /usr/local/psa/var/log/maillog | head
Aug 19 00:04:45 web48002 postfix/smtp[28115]: certificate verification failed for inbound.hsaforamerica.com.netsolmail.net[206.188.198.64]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
[Code] ....
How/where do we edit our CA file under Postfix - and why is the standard one installed by PPA not including some of these VERY MAJOR CAs?!?
I would like instructions on how to edit this in a manner that it will not get overwritten by some PPA update or yum update.
How to install a certificate for a brand ?
Let's say I have a brand B associate to a reseller R and a domain name domain.com.
When B sell a new subscription (with the associated webspace) it is available under sub.domain.com.
I would like to have a specific SSL certificate installed by default for every newly created webspaces by B under xxx.domain.co
I’ve read the documentations of (PBAS, Plesk, and Securing Websites).how to add SSL Certificate to our Webmail? In addition, I need to know, how to request CSR key and install SSL for our mail server in order for us to protect our emails and to use the SSL Protocol in mail softwares such as Outlook? I will explain the scenario in details:
1- We have (www.example.com) which is our "Plesk Server hostname" and a subscription in our "Plesk Server".
2- We have (pbas.example.com) which is our "PBAS Server hostname" and it's not a subscription in our "Plesk Server".
3- We have (account.example.com) which is a "Subscription" in our "Plesk Server".
Here are the DNS records of our domain and subdomains:
Host-Type-Data
-A-192.168.1.30
www-A-192.168.1.30
mail-A-192.168.1.30
pbas-A-192.168.1.31
account-A-192.168.1.32
-MX-example.com.
how to generate CSR key for each domain/subdomain and how to install the SSL for it? Our "Plesk" is 11.5 and installed on CentOS 6.4.
I can't send any mail from the server. I don't get any log information about errors. Postfix is installed on opensuse 13.1.
View 3 Replies View RelatedHow can i change the content of the bounce email?
I'm using Postfix 2.7.1 on Debian 6 with Plesk 11.0.9.
Currently the text of a bounce mail shows:
This is the mail system at host example.org.
Your message could not be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message.
The mail system
<_plesk_bounce_example.org@localhost.localdomain> (expanded from
<ttt@example.org>): This address no longer accepts mail.
And I'd like to get rid of address <_plesk_bounce_example.org@localhost.localdomain>.
I added the bouce file template to Postfix's config by:
postconf -e 'bounce_file_template = /etc/postfix/bounce.cf'
Restarted postfix.
Config related to bounces:
Code:
~ # postconf | grep bounce
2bounce_notice_recipient = postmaster
address_verify_sender = $double_bounce_sender
backwards_bounce_logfile_compatibility = yes
bounce_notice_recipient = postmaster
[Code] ....
Well, where can i change the template for bounces, now?
I m trying to get the feature "Outgoing Mail from Exclusive IP Addresses" working, as with an updated Postfix configuration the menu entry for this functions does not appear anymore.
Maybe i am missing something in my configuration that tells Plesk to not show it anymore.
Plesk 12 - fresh installation on Debian Wheezy.
We only changed main.cfnd here is the configuration file (please note that the formatting was a bit corrupted by the plesk panel ):
Code:
alias_database= hash:/etc/aliases
alias_maps= hash:/etc/aliases, hash:/var/spool/postfix/plesk/aliases
append_dot_mydomain= no
biff= no
disable_vrfy_command = yes
header_checks= regexp:/etc/postfix/header_checks
mailbox_size_limit= 0
[Code] ....
My issue started ince a couple of months seemed to increase with update to Plesk 12.0 (though I can't guarantee it).I am using Centos 6.5, all updated. What happens is that postfix usage starts to increase without any apparent reason (during week-ends for example). Then postfix is not responding anymore.
Code:
top - 13:27:13 up 3 days, 18:44, 0 users, load average: 0.73, 0.33, 0.32
Tasks: 238 total, 2 running, 236 sleeping, 0 stopped, 0 zombie
Cpu(s): 0.3%us, 0.6%sy, 0.1%ni, 98.7%id, 0.3%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 32917292k total, 8982212k used, 23935080k free, 1899416k buffers
Swap: 1046520k total, 0k used, 1046520k free, 4905884k cached
[code]....
The VPS has 16 domains running on it, all with different web addresses and their own email accounts etc.
It's a Linux server and is running postfix for the mail. The main website on this domain has the mail service disabled because we have an exchange service on our own server here in the building where we work. Now when anyone on any of our domains on the VPS try to email us at 'maincompany.com' they get the following error message:
This is the mail system at host <vps address>.
Your message could not be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can delete your own text from the attached returned message.
The mail system
<stevew@maincompany.com>: mail for maincompany.com loops back to myself...
My hosting provider recently (and without any warning) decided to block outgoing connections to port 25. What this means is for any client/domain/email address that has a forwarder setup, the mail will never reach its destination because the connection to the other server always times out. The error logs look like this:
postfix/smtp[8414]: connect to ASPMX2.GOOGLEMAIL.COM[74.125.131.26]:25: Connection timed out
postfix/smtp[8421]: connect to aspmx2.googlemail.com[74.125.131.26]:25: Connection timed out
postfix/smtp[8425]: connect to aspmx3.googlemail.com[64.233.186.26]:25: Connection timed out
postfix/smtp[8423]: connect to aspmx4.googlemail.com[64.233.166.26]:25: Connection timed out
I haven't been able to find a way to force relay to 465. Or maybe I shouldn't have relay on at all and do this another way?
I recently moved to virtual dedicated hosting for my website, mainly because I wanted a better mail server to work with to manage a mailing list.
I have a few PHP software scripts for different things: managing affiliates and email marketing.
I want to send mail using both of those via SMTP on my new server. They both have a place to type in the host and username/password.
The problem I am noticing is SASL Authentication. They attempt to connect to the host without any trouble. However, the affiliate software fails SASL Authentication every time I try to send an email or test the email system.
Email marketing software connects when I manually send a campaign. However, users are supposed to immediately receive a confirmation mail upon opting in. In this case, it shows up as an attempt in the mail log, but it fails SASL Authentication. I don't know if it's a problem with the software or not, since it attempts to connect but fails, yet connects successfully in other cases.
My question is this: Is there another way around this? I've contacted my host to double check on the appropriate username/password to pass authentication. I will also be contacting the software developers after I receive an answer.
But if nothing comes of it, is there any way around it? Is there a place where I can have it automatically authenticate if the email is coming from a certain user, or if the attempt is being made from the same server (everything sits on the same server, I use localhost in the software to connect to the mail server). Since I am the only person who has access to the server and uses it, it seems safe to automatically authenticate if the request is being asked by the server itself...
I'm just looking for other alternatives if the software does indeed have a problem and I cannot figure it out.
Keep in mind I am very new to all this server and root access. Just a few days ago I was on a shared hosting plan, so I didn't have any access to anything. With that in mind, I know very little about mail servers, although I've been learning more over the past few days. I only stumbled upon the mail logs on my server recently by browsing files in the control panel (I'm not familiar with SSH, although I do have access to it)
we have identified a number of customers with weak passwords - we wish to send them an email and then wait 1 hour - then change their passwords to the new password we have identified - due to them being across multiple domains, we don't want to do this via the PPA web gui - it would take quite a long time.
What is/are the commands for changing mailbox password for SMTP/IMAP/POP3??
i.e., is there a PPA command for changing both sides of send/receive?
We want to configure our PPA mail node to send all outbound mail through our spam filtering appliance but don't know where to start.
Reading standard Postfix docs give basic instructions on how to direct a handful of domains through a mail relay but we want to direct every outbound email from all domains through our spam filter.
We also want to ensure that any regular updates to the mail node won't break or undo this config.
Where do we access our settings for mail account password strength? I need to dial our minimum password strength UP to the highest level.
View 5 Replies View RelatedIs there a KB (I couldn't find one) - to implement rate limiting for receiving mail on our service nodes?
Just had another customer account compromised (not a very weak password either) - and that meant > 250,000 emails - a LOT of cleanup.
Not only do we need rate limiting, but we also need notification of potential abuses.
I am trying to install Automation, and I keep getting an error after the "Getting SELinux" step, here is a log of the process so far:
Code:
[INFO]: Checking current user privileges...
[INFO]: Checking critical environment requirements...
[INFO]: Determining OS parameters...
[INFO]: Detected OS: CentOS-5-x86_64
[INFO]: Getting SELinux state...
[ERROR]: Unexpected error: ''
[Code] ....
I have tried running the installation on a different server and the same issue came up...
I am installing plesk automation on centos 6.5 using this command on a fresh system
./ppa_installer --password some_password --admin_email some_email
and get the following error.
[LOGTEE]: Error Downloading Packages:
[LOGTEE]:
[LOGTEE]: libuuid-2.17.2-12.18.el6.i686: failure: Packages/libuuid-2.17.2-12.18.el6.i686.rpm from base: [Errno 256] No more mirrors to try.
Looks like some lib is not found in the mirrors.
On a clean install of CentOS 6.6 (Final) I did the following:
1. updated the /etc/hosts file to point my ip to the hostname
2. Open the ports in the iptables file.
3. ran the ppa_installer per the instructions on [URL] ....
The ppa_installer log says installed Successfully. However the following occurs:
1. Cannot browse to the url:8443, or any of the other variations (8080, 8880, https/http)
2. Yum installer is now broken (I replicated this twice). Yum will not run at all with the following error:
There was a problem importing one of the Python modules required to run yum. The error leading to this problem was: /usr/lib64/libcurl.so.4: file too short
Please install a package which provides this module, or verify that the module is installed correctly.It's possible that the above module doesn't match the
current version of Python, which is:
2.6.6 (r266:84292, Jan 22 2014, 09:42:36)
[GCC 4.4.7 20120313 (Red Hat 4.4.7-4)]
I am now going to try Cent OS 6.4.. will report back.
OS: CentOS 5.9 (Final)
Panel version: 11.5.30 Update #28, last updated at Dec 26, 2013 04:20 AM
php: php53u 5.3.27-1.ius.el5
php.ini
upload_max_filesize = 20M
memory_limit = 128M
post_max_size = 20M
Browsers: Chrome Version 31.0.1650.63 m and IE 8
smaller files upload fine, though when reaching the 10MB and above level, after the attachment loads the new message window defaults to the Your Session Has Expired. Please Login Again.
Are there any settings that I am missing, or is this a current bug in this version of Horde?
Somebody is sending spam from my postfix server.
How can I locate the domain causing the problem?
Plesk 11.5 Lunix
Centos 5.6
I am having problem sending email. Email from others came in but when sent from the server it does not arrived.
SMTP Server (Postfix) keep stopping...
I'm running Parallels Plesk 12 on Debian GNU/Linux 7.6...I have a valid certificate for my mail server : mail.mydomain.tld but I don't find the place in Plesk 12 to put it.
View 2 Replies View RelatedPRODUCT, VERSION, VERSION OF MICROUPDATE, OPERATING SYSTEM, ARCHITECTURE
Windows Web Server 2008 SP2 + Plesk 11.0 x86
PROBLEM DESCRIPTION
I've created an self-signing SSL-Certificate an set it up to my server-ip. Then, I got kicked from the server and now, on every site hosted on the server, even the Plesk Panel(https://xxxxxx:8443 is not reacheable. Server-Timeout.
One of the pages is this one: [URL] ....
STEPS TO REPRODUCE
Created self-signing Certificate, only filled in my full Name, Country and Domain.
Got kicked from the server, and now I have no possibility to access my server.
ACTUAL RESULT
Nothing.
Got File Access with a recovery system, but this isn't really working.
EXPECTED RESULT
A working Plesk Panel would be nice.
I need to move an SSL certificate from a cPanel server to a Plesk server.
View 3 Replies View RelatedInstalling packages task failed. The log fails on:
Installing packages
Loaded plugins: fastestmirror, rhnplugin
Loading mirror speeds from cached hostfile
* cloudlinux-x86_64-server-6: cl-mirror.krystal.co.uk
* elrepo: mirrors.coreix.net
Running rpm_check_debug
Fatal error during packages installation: Test Transaction Errors: package mysql-libs-5.1.73-3.el6_5.x86_64 (which is newer than mysql-libs-5.1.71-1.el6.i686) is already installed
How can we get it to continue?
im trying to migrate my plesk 11 linux server (i installed the PPA Moving Tools) but when im running the assimilate command: ppa-assimilate generate-migration-list config.ini...im getting this error:
[root@server ~]# ppa-assimilate generate-migration-list config.ini
[2013-08-30 00:40:54] [INFO] | Initialize migrator
[2013-08-30 00:40:54] [INFO] | Load configuration
[2013-08-30 00:40:54] [INFO] | PPA host: XXX.XXX.XXX.XXX
[2013-08-30 00:40:54] [INFO] | CBM URL: https://XXX.XXX.XXX.XXX:8443/plesk-billing/direct-api.php
[code]....
Today i setup a test environment. I have all fresh OS installs today. Management node is Centos 6.5 with PPA 11.5 update 2
I go to servers > add > choose IIS role. The Server is Windows 2012 R2, I have disabled Windows Firewall and disabled UAC, and rebooted it before trying to setup on PPA.
Enter IP and i get the following error.
Code:
Automated WinRM Enabling Failed
Error during WinRM enabling on '192.168.1.101'. Script exit code is 1. Script output (stdout/stderr): ERROR: Cannot open control pipe - NT_STATUS_INVALID_PARAMETER
Failed to install winexesvc
/
Repair Connectivity
To make automated deployment possible please try to check network communications between Management and target nodes. Ensure that WMI is not blocked on a target node. Or copy, paste and invoke the following script on a target node.
netsh advfirewall firewall add rule name="WinRM in" protocol=TCP dir=in profile=any localport=5985 remoteip=any localip=any action=allow
netsh advfirewall firewall add rule name="POA in" protocol=TCP dir=in profile=any localport=8352 remoteip=any localip=any action=allow
[code]...
However, it does create several roles in windows firewall so PPA can connect and sucessfully created X number of rules.I too disabled IPTables on management node.