I'm trying to create a script or WHM plugin with permissions where resellers will have an ability to temporarily allow an IP address (mirror CSF's "ALLOW IP" function). I am not sure though how to do this. I have checked with CSF if its possible or if i can hire them to do such script but they won't help.
View 1 Replies
OK, This is killing me, can someone tell me how to unblock ports 7000-9000 in ConfigServer (CSF) for my whole server? I need them unblocked for WHMSonic, and all my admins are off for the weekend so I really need some help.
View 7 Replies View RelatedI'm trying to install HyperVM (I know, it isn't great, but need something quick) but need to unblock ports 8888 and 8887. I have no idea on how to do this via SSH. I've looked on Google, but nothing.
If you have a suggestion for another VPS panel which you think is much better than HyperVM and is free, please let me know. I might aswell install that then.
I wanted a mail server, but changed my mind. I asked a company from this forum to harden my server and at the same time block mails.
I tried to unblock and all mails to hotmail come up saying they are suspicious and never get delivered at all.
I did a checkdns.net report and:
Code:
Domain AAAAAAA.COM has only one mail-server
- Checking mail server (PRI=10) AAAAAAA.COM [XX.XX.XXX.XX]
Error connecting to mail server AAAAAAA.COM [XX.XX.XXX.XX] port 25 : timed out waiting for connection
Some of your MX do not work properly
I've added a TXT record an MX record etc.
I only want PHP script located on the server to send mail.
I don't want external IPs to connect to the SMTP server.
I am opening this thread to complain about Yahoo mail issues with our ISP. Its been a month that we are having problems trying to send e-mail to Yahoo accounts.
First of all we are a Web Hosting company in Brazil and the IP that they blocked only host our main domain maxihost.com.br. We dont send bulk ou spam e-mails, we only send invoices and support replies to their accounts.
The logs from our mail servers when trying to e-mail them is below,
Code:
LOG: MAIN
cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -M 1KHPUv-0007rp-0r
delivering 1KHPUv-0007rp-0r
Connecting to g.mx.mail.yahoo.com [209.191.88.239]:25 ... connected
SMTP<< 421 Message from (189.1.169.32) temporarily deferred - 4.16.50. Please refer to [url]
SMTP>> QUIT
LOG: MAIN
SMTP error from remote mail server after initial connection: host g.mx.mail.yahoo.com [209.191.88.239]: 421 Message from (189.1.169.32) temporarily deferred - 4.16.50. Please refer to [url]
Note that I already filled out the form
[url]telling them I am an ISP and I do not send any e-mail spam for their accounts, although every time I fill it I get an automatic/canned e-mail from their system with the following content,
Code:
Hello Guillherme,
Thank you for writing to Yahoo! Mail.
Please note that if you are not the mail server administrator for the
mail server(s) affected, we encourage you to contact the administrator
so they can address the possible issues regarding mailings from the mail
server. We also appreciate your report as your input helps us to
identify ways to constantly maintain and improve our service. We
apologize for any inconvenience this has caused you.
If you notice any further difficulties when delivering to Yahoo! Mail
accounts, after waiting a reasonable amount of time, please let us know
by replying directly to this email. However please note the following:
If you are receiving the error code "421 Message from x.x.x.x
temporarily deferred" or "451 Message temporarily deferred - 4.16.50" in
your SMTP logs, this indicates that the message you attempted to send
was not accepted by Yahoo! Mail servers. It is not a permanent error;
your system will automatically re-try later. If, after attempting to
deliver to Yahoo! and receive the 4.16.50 error repeatedly and conform
to the best sending practices outlined in the following page, we
encourage you to apply for prioritized sending at the link below.
Recommended Best Practices:
[url]
Prioritized Delivery (Please note that this form can also be used by
senders whose mailings are being directed to the Bulk Folder):
[url]
If you are receiving a separate error than that above, please provide
the text of any error messages you may have received. Also, providing
the specific IP address of the mail server that experienced the delivery
issue will help us to troubleshoot the issue more efficiently.
For assistance with delivery issues to Yahoo! Mail, please visit:
[url]
We appreciate your patience while we work to improve and maintain our
service.
Thank you again for contacting Yahoo! Mail. Your case number for this
issue is 50943856. Please reference it in all future communication about
this particular issue.
Regards,
James
Yahoo! Customer Care
50943856
For assistance with all Yahoo! services please visit:
[url]
When I try to reply to that e-mail I get an error back.
I am tired of fighting yahoo and their horrible email policies.
I have some users that run contests and send weekly mailers to a large number of users on yahoo.. Well every time they send out their mailers (keep in mind they are not spam) yahoo decides to greylist our servers. I guess this is yahoo's way of attempting to block spam but then why is our "non spam" mail being deferred?
I am just really tired of having 10k emails in my mail que that are retrying throughout the day because yahoo deferred them. It's causing higher server loads and wasted bandwidth.
The error messages read:
Please refer to[url]
So I go there.. make sure we are following their communist guidelines, and fill out the form only to be greeted with an automated response. Nothing else from yahoo, evidently they want $25/hr to fix the issue.. Extortion!
Todays dilbert is spot on...
[url]
I have 7 different domains that need exactly one email address each (total 7) for just a few months, until I've researched and contracted with my host. I can do this one of two ways:
Get unlimited-domain full hosting that may not be the greatest quality but wins on a) pricing and b) the fact that I'll only need it for a few months.
OR
Get email-only hosting for these same 7 different domains that need exactly 7 email addresses . . . with a host that is a little more reliable but ends up costing the same as the above option because there is severely-limited storage required.
My base requirements are twofold:
1. I must be able to use my email client (software program) to collect all email
2. I need to be able to get in and change the addressee portion at will
This is what I've been able to do with my pobox account, but now I want to do it using (7 of) my own domains.
I setup Ruby Rails via Cpanel > Ruby Rails area.
I have uploaded typo files to /etc/rails_apps/typo and setup mysql database user password. When I visit the domain at [url]typo I get a 503 / Service Temporarily Unavailable error message.
One particular server I have out of a few (same data center / network) is acting up network wise. The server load is minimal, so its not that. The NOC confirmed no network issues either, which makes sense since its one server out of about 4 that have this issue. All have the same exact specs, o/s, Cpanel, etc.
root@server [/etc]# mii-tool
eth0: negotiated 100baseTx-FD, link ok
SIOCGMIIPHY on 'eth1' failed: Resource temporarily unavailable
Tracert/ping from dnsstuff.com to the server IP is normal. A couple other servers I lease (100% identical configuration) work just fine.Kernel
Linux 2.6.9-78.0.1.ELsmp #1 SMPFirewall
Quote:
TCP IN
20,21,25,26,53,80,110,143,443,465,953,993,995,2077,2078,2083,2087,2095,2096,3306
TCP OUT
20,21,25,37,43,53,80,110,113,443,587,873,953,2087,2089,2703,3306
UDP IN
20,21,53,953
UDP OUT
20,21,53,113,123,873,953,6277Confirmed, resolvers in resolv.conf are correct.
ICMP IN = 1
root@server [~]# traceroute dnsstuff.com
traceroute to dnsstuff.com (75.125.82.162), 30 hops max, 38 byte packets
1 xxxxxx (xxxxxx) 0.757 ms 0.507 ms 0.503 ms
2 ge2-11.coreswa.cf.teamnet.net (xxx.xxx.6.57) 0.325 ms 0.321 ms 0.290 ms
3 ge0-1.border2.cf.teamnet.net (xxx.xxx.1.130) 0.270 ms 0.359 ms 0.312 ms
4 border1.p6-3.teamtech-8.ext1.dal.pnap.net (216.52.189.157) 18.190 ms 18.059 ms 18.896 ms
5 core3.tge5-2-bbnet2.ext1.dal.pnap.net (216.52.191.98) 108.819 ms 18.796 ms 18.916 ms
6 207.88.185.73.ptr.us.xo.net (207.88.185.73) 18.548 ms 18.495 ms 18.464 ms
7 65.106.4.233.ptr.us.xo.net (65.106.4.233) 18.553 ms 18.215 ms 18.349 ms
8 * * *
9 * po-1.r02.dllstx09.us.bb.gin.ntt.net (129.250.2.154) 18.361 ms 19.005 ms
10 xe-4-4.r03.dllstx09.us.ce.gin.ntt.net (157.238.225.6) 18.750 ms 18.473 ms 18.342 ms
11 et1-1.ibr01.hstntx2.theplanet.com (70.87.253.50) 26.666 ms 24.172 ms 23.806 ms
12 po1.car03.hstntx2.theplanet.com (74.55.252.74) 24.387 ms 24.525 ms 24.244 ms
13 * * *
14 * * *
15 * * *
16 * * *
17 * *
Quote:
root@server [/etc]# netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr |more
36 127.0.0.1
26 198.53.156.181
17
14 200.91.165.130
12 200.91.165.129
10 76.255.78.120
10 204.253.133.10
7 190.68.25.222
7 139.18.199.2
root@server [/etc]# ethtool eth0
Settings for eth0:
Supported ports: [ TP ]
Supported link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Supports auto-negotiation: Yes
Advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Advertised auto-negotiation: Yes
Speed: 100Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 1
Transceiver: internal
Auto-negotiation: on
Supports Wake-on: d
Wake-on: d
Link detected: yes
root@server [/etc]# sysreport
Traceback (most recent call last):
File "/usr/sbin/sysreport", line 31, in ?
import sos.policyredhat
ImportError: No module named sos.policyredhat
root@server [/etc]# cat modprobe.conf
alias eth0 bnx2
alias eth1 bnx2
alias scsi_hostadapter mptbase
alias scsi_hostadapter1 mptscsi
alias scsi_hostadapter2 mptfc
alias scsi_hostadapter3 mptspi
alias scsi_hostadapter4 mptsas
alias scsi_hostadapter5 mptscsih
alias usb-controller ehci-hcd
alias usb-controller1 uhci-hcd
root@server [/etc]# modinfo bnx2
filename: /lib/modules/2.6.9-78.0.1.ELsmp/kernel/drivers/net/bnx2.ko
author: Michael Chan <mchan@broadcom.com>
description: Broadcom NetXtreme II BCM5706/5708 Driver
license: GPL
version: 1.6.9 478DCC31494367381918DC4
parm: disable_msiisable Message Signaled Interrupt (MSI)
vermagic: 2.6.9-78.0.1.ELsmp SMP 686 REGPARM 4KSTACKS gcc-3.4
depends:
alias: pci:v000014E4d0000164Asv0000103Csd00003101bc*sc*i*
alias: pci:v000014E4d0000164Asv0000103Csd00003106bc*sc*i*
alias: pci:v000014E4d0000164Asv*sd*bc*sc*i*
alias: pci:v000014E4d0000164Csv*sd*bc*sc*i*
alias: pci:v000014E4d000016AAsv0000103Csd00003102bc*sc*i*
alias: pci:v000014E4d000016AAsv*sd*bc*sc*i*
alias: pci:v000014E4d000016ACsv*sd*bc*sc*i*
alias: pci:v000014E4d00001639sv*sd*bc*sc*i*
alias: pci:v000014E4d0000163Asv*sd*bc*sc*i*
Server Specs
Dual Core Dual Xeon 2.8Ghz / 4GB Memory
Centos 4.7 / Cpanel 11
Half C Class on the Server
I'm running a CentOS 6 server with Plesk 11.0.9 installed. It's only being used for dev purposes with only a couple vhosts running on it. All of the vhosts are using PHP - there are a few WordPress sites and Zend Framework 2 applications running. Up until a few months ago it was also running a high traffic WordPress site, but that's no longer the case.
This server has been running without problems for over a year. A few days ago I first started noticing 503 errors (Service Temporarily Unavailable) on accessing one of the vhosts from the web browser.
I logged on through ssh and noticed the load was a bit higher than I expected (nothing crazy though). All other vhosts using PHP also gave me the same error. The only vhost that was working normal was a Ruby on Rails app (Redmine).
I also did a netstat -napt and noticed many connections from two or three IP addresses. I checked their geographical location and after blocking them through iptables the problem seemed to have gone away.
Now it's a few days later and the same problem started popping up. I checked again through netstat and noticed that again a whole bunch of connections from only a handful of IP addresses were connected to Apache.
When I was digging deeper I noticed that some of those IP addresses were what looks to me like other servers (at least they're running Apache). I'm suspecting they are hacked servers and they're trying to use my server to send spam or some other type of evil.
I just blocked those new IP addresses in iptables and that seemed to have solved the problem for now again, but I want to solve the root of the problem.
So my questions are:
1) How can I find out to what vhost those clients are connected?
2) Why does Apache stop working with not that many client connections, when it used to serve thousands of visitors at the same time when that big site was still running on this server?
3) What could they possibly be using my server for? The first time it happened I thought that they found some leaking WordPress plugin to use to spam people, but today I checked and there's barely anything in the mail queue.
Every now and then I will attempt to load my Plesk 12, CentOS6 Website, and receive the following error:
503, Service Temporarily Unavailable.
It requires a restart of nginx and apache in order to remove the error. It then can come back in a week, or in a few hours. Its completely random. I also can't find anything in the logs.
This started happening after I enabled backups, then later disabled backups because of problems with my backup server. However this does not occur when my scheduled backup was.
