Hot answers tagged plesk
10
First, if there's a rootkit, you're probably fighting a neverending fight. Take the server offline and reinstall and restore backups that are pre-infection. That's the "best" method of fixing.
Second, were you up to date on patches and such before the infection or did you patch after?
Third, what custom code is running on the server outside Plesk? How do ...
9
qmail uses the first IP address it finds to send mail from. If you want to change this behaviour, you have to patch it and recompile. If this scares, worries or concerns you then maybe qmail is not for you.
There are patches available that do this:
http://rno-consultores.com./mail/qmail/qmail-1.03_outgoingips.patch
...
9
What's wrong?
According to man 5 crontab:
«…
The "sixth" field (the rest of the line) specifies the command to be run. The entire command portion of the line, up to a newline or % character, will be executed by /bin/sh or by the shell specified in the SHELL variable of the cronfile. Percent-signs (%) in the command, unless escaped with backslash ...
8
You're Doing It Wrong
In fact, you're Doing It Wrong in two ways:
You're moving to a new IP instead of getting your old one removed from the blacklists.
Find out what blacklists you're on (dnsstuff.com has a free tool for this!), and contact them for removal.
Polluting your IP space by leaving addresses on the blacklist will eventually get your whole ...
7
Why not just figure out what hashing algorithm Plesk uses, and replicate that functionality in your PHP application? You don't need the un-ecrypted version of a password to authenticated against it, and you never really want to store a password in the clear, or with a reversible encryption.
6
Yes - that's the point of having nameservers separate from webservers. As long as your hosting company's nameservers are up, mail won't stop.
Also, even if your mail servers should be unreachable, as long as there are correct nameserver and MX records, any sender systems should just queue the mail on their servers and retry the periodically.
5
Don't put a complex command like this directly in the crontab file.
Put it in a script and call the script from cron.
By default cron-jobs get run by sh (unless configured otherwise). When you go through a script you can set the proper shell to use by putting a #!/bin/bash or something along those lines in the first line of the script.
cd ~ is dangerous as ...
3
Your question seems to confuse incoming and outgoing traffic.
You can't run more than one (type of) server listening on the IP address and port - that's how clients know where to connect. Apache is not unresponsive - if it's running at all, it can't see the traffic coming in on port 80 because your mailserver is using it.
Your first port of call should be ...
3
There is no generic approach - it's all hands-on. You typically would need to have configured extensive logging, preferably not only from the system you are inspecting but also from an independent IDS, which you are periodically archiving. Also, a good bunch of experience with computer security and forensics is required, otherwise you don't stand a chance.
...
3
There are usually 2 ways to manage this sort of problem ;
You have a bare repository centralizing your application somewhere on the server, and one clone of this repository (with a working tree) in each httpdocs folder
you then set a post-receive hook on the bare repo to update all httpdocs clones of this repository, usually a shell script will suffice ...
3
There would be several options:
IF you are using mod_php - add .htaccess file with php_admin_flag magic_quotes_gpc off in docroot of your site
IF you are using mod_php and have server admin (root) privileges - create a file .../conf/vhost.conf in a folder where your domain is located. You will need assistance of server admin, if you don't have admin ...
2
Probably, the easiest way is to update the Plesk panel. Plesk 11 supports nginx by default. And you will be able to enable it by pushing a button.
2
Depending on the OS you have elected to install, you will need to install php-pear onto your system. On Red Hat/CentOS, this is
yum install php-pear
This will install the pear binary for you. If you then need specific pear modules, you will need to install them using:
pear install "module"
Where module is the name of the module. Don't forget to add ...
2
Stop using qmail. It hasn't been updated in 14 years, it's got security vulnerabilities, RFC violations, programming faults, and generally breaks for no good reason. Find something, anything else.
No this doesn't directly answer your question. But sometimes the correct answer is "don't do that"
2
The browser will still send a Host: userdomain.com header, the CNAME record will not cause a redirect. You will therefore need ServerAlias userdomain.com in your configuration. It is in your application that you will need to associate userdomain.com to the user.
2
I just had this problem, a bit more difficult though because I wanted to setup to use PEAR in SSH other scripts not in my domains httpdocs.
If you have installed PEAR on PLESK but tested it and it's not working, include the following, for each domain you wish to use PEAR, in
/var/www/vhosts/example.com/conf/httpd.include
and/or
...
2
The package name is bind9 not bind. So, the installation command should be:
$ sudo apt-get install bind9
Make sure you have bind9 installed using the following command and then try to start it and check your logs for relevant error messages:
$ sudo dpkg -l | grep bind9
For the system logs, there is no /var/log/messages file in Ubuntu 12.04. However, ...
2
You could verify if it is listening on those ports on a public interface with a simple command.
netstat -tunelp | grep -i ssh
Obviously, you'd also need to make sure that the remote machine has the outbound port 213 open and that the server in question has inbound 213 open. Nmap from a remote machine would show this
nmap -v -sT myremotehost.com -p 213
...
2
You can find the answer here:
http://stackoverflow.com/questions/4209999/an-asp-net-setting-has-been-detected-that-does-not-apply-in-integrated-managed-p
Which is: Make sure to add this to your web.config
<configuration>
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
</system.webServer>
...
2
The response you get actually means web server doesn't know a site name.
You can either add "subdomain.domain.com" as an alias to "pleskdomain.com" or (if you are on Plesk 10.0+) add another site "domain.com" in Plesk and make subdomain "subdomain.domain.com" for it with docroot in the same folder as "pleskdomain.com" has. Both actions would make web server ...
2
You can do the following in your vhost.conf file:
ServerAdmin webmasta@localhost.com
ServerName a server name
ServerAlias a server alias
DocumentRoot /path-to-django-web/root
<Directory /path-to-django-web/root >
Options FollowSymLinks Indexes
DirectoryIndex index.php index.html
AllowOverride All
Order allow,deny
Allow from all
...
2
I appreciate this an old question, however it's worth pointing out that since this question was posted there have been several remote vulnerabilities in Plesk which have been patched in 9.5.4.
If you are running a version of Plesk before 9.5.4 you should upgrade to 9.5.4 as soon as possible. Running the upgrade process will also install microupdates which ...
2
Since this is one of the top results on Google for "plesk vhost.conf restart", and I could not find useful instructions elsewhere, I will share my experience.
I needed to add this to my Apache/Plesk configuration to allow larger uploads:
<IfModule mod_fcgid.c>
FcgidMaxRequestLen 52428800
</IfModule>
So I put that exact content into a new ...
2
We have seen this on plesk 9.5 servers despite having Parallel's security patches installed from February.
Basically they are POSTing to the login page and getting in without auth, then going straight for the WYSIWYG file manager and appending the code to js files. Plesk are refusing to acknowledge this and the only option is to firewall plesk off and ...
2
You could try adding a line
Include /var/www/vhosts/example.com/conf/*.conf
into your httpd.conf file after the default
Include conf.d/*.conf
at line 210. Which may get things up and running. If this works then you probably need to speak to plesk support to find out why the update overwrote the original so you can prevent it happening again in future.
...
2
Theoretically, if the program can get the encryption password, yes, you can get back the password in plain text.
EDIT: added decryption code.
function decrypt_password($pass,$key)
{
$base64encoded_ciphertext = $pass;
$res_non = mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $key, base64_decode($base64encoded_ciphertext), ‘ecb’);
$decrypted = $res_non;
$dec_s2 = ...
2
The actual configuration files for the firewall under Plesk are in the
/usr/local/psa/var/modules/firewall/
directory and in particularly in the
firewall-active.sh script
make your changes in there and then restart the firewall through
/etc/init.d/psa-firewall restart
BUT
these changes are not reflected in the web interface so if you change ...
2
Found out, that in the php.ini of the vhost, the post_max_size was still set to its default value of 8M, which has overwritten the servers default php.ini and was of course too low to upload videos, so the script wasn't able to convert videos at all. Increased the value and everything working fine now again.
Best regards!
2
Apache is a web server that is bound on port 80. You have setup an SMTP server on port 80. The only solution is to use another port for STMP that you are 100% sure won't be used by anything else.
The tutorial you link to sets things up on port 2525. Why not use that?
service smtp
{
service = smtp_alternate
type = UNLISTED
...
2
I never use prtg, but if I am reading the chart correctly, you are running out of memory. And your server problem last, if not completely crashed, from around 1am to 2-3am. Though the problem seem to start from 12am. Your server load just jump to the roof right at that moment.
During that period of time:
Chart Memory (Swap) Free 2, swap usage build up to ...
Only top voted, non community-wiki answers of a minimum length are eligible
