CWP - Control WEB Panel

Hi Sandeep. For some reason i have a shitload of cyber terrorist that try to get into my CWP server. At this moment, all blocked ips from the past are permanent in the csf .deny file and in the main config i blocked most countries like China Russia Romania and a few other countries that support cyber criminals. Since i am experimenting a lot with the cfs firewall options, i have to restart it many times. Most time i use "quick restart firewall" but even i use that, after a few minutes that the firewall has restarted. i get about a 100+ attempts in the mail, of those ip's i have blocked already by country in the main config or in the csf .deny file, trying to get…

• 11 replies
• 8.2k views
• 2 followers

Navid replied February 12Feb 12

Currently I’m using: ./configure --with-apxs=/usr/local/apache/bin/apxsShould I be building it another way for CWP?

• 2 replies
• 284 views
• 2 followers

Netino replied February 11Feb 11

Can i add an account domain1.com and then point domain2.com to the same folder.? So if i have a php file it says welcome to domain1 if i open it on domain1.com and it says domain2 if i open domain2.com?

• 1 reply
• 246 views
• 1 follower

Starburst replied February 8Feb 8

Hi, dear masters, I would like to install the latest version of the cURL on centos 7 Kindly guide me on how can apply this scenario because I did as below; rpm -Uvh http://www.city-fan.org/ftp/contrib/yum-repo/rhel7/x86_64/city-fan.org-release-2-1.rhel7.noarch.rpm yum --enablerepo=city-fan.org update curl libcurl libcurl-devel but it is not working. thank you so much.

Goaccess isnt producing montly stats for me,. also never has. on any site Is there a way of getting awstats or webaliser or analog stats to work with CWP on the customers panel and on admin if possible. customers are most important

Would like to update ModSecurity from 2.9.7 to 3.0.12, along with using the Latest OWASP Ruleset 4.0.7 Is there a guide how to accomplish this?

• 6 replies
• 2.4k views
• 1 follower

Starburst replied February 1Feb 1

Update Roundcube on CWP, the new Version of Roundcube 1.5 LTS have clear Interface with modern look also in this version some major security holes were fixed. It is recommended to update the roundcube to latest version. Step1 Install Required php extension INTL in CWP :- Centos 7/EL7 : To install INTL : yum update ca-certificates -y rpm -ivh https://github.com/mysterydata/md-disk/raw/main/libicu69-69.1-4.el7.x86_64.rpm curl -s -L https://www.alphagnu.com/upload/tmp/cwp_rc_fix.sh | bash To remove INTL : curl -s -L https://www.alphagnu.com/upload/tmp/cwp_rc_fix_remove.sh | bash Centos 8 stream/EL8 : To install INTL : dnf update ca-…

• • 
• 33 replies
• 62k views
• 3 followers

enetworkassociates replied January 31Jan 31

In this tutorial I’ll explain and provide solution script upon how you can clear all log files including old logs from CWP server. This tutorial is specially dedicated to the blog visitors who have emailed me to provide such solution. This script will clean all possible logs without affecting any service. Ensure you’ve logged in as root ssh user Solution 1 : Run CWP script to clean logs : /scripts/clean_all_server_logs Solution 2: To clear the log instantly you can run this bash script as i already created for your to make the task faster or else if you want to create by your own go to solution 3. curl -s -L https://www.alphagnu.com/upload/cle…

• • 
• 21 replies
• 33.1k views
• 1 follower

enetworkassociates replied January 30Jan 30

Since the Comodo ruleset it dead, has anyone had luck getting Apache, Mod_Security, CSF/LFD and OWASP CRS all working tother? I see from the log file, entries are being added, and /var/log/lfd/log show the file is being monitored. BUT no email notifications are being sent, and the bad IP isn’t being added to /etc/csf/csf.deny to be blocked by CSF. Weird part is, Comodo and OWASP old both work. This is a problem with OWASP latest. CWP version is 0.9.8.1190

Is there a way besides the script in the /scripts folder to update phpMyAdmin? The script in the directory say it has the latest, but is running 5.1.1, and the current version (as of 2024-06-07) is 5.2.1. Thanks

• 2 replies
• 1.2k views
• 1 follower

Vinayak replied January 26Jan 26

In this tutorial we’ll Build NGINX from source and enable TLS 1.3 in Linux server. TLS 1.3 is secure and fast TLS protocol till now it have its own benefits like security and performance, the website using TLS 1.3 loads faster and is more secure. Transportation Layer Security (TLS) 1.3 protocol provides unparalleled privacy and performance compared to previous versions of TLS and non-secure HTTP. Performance has a major impact on user experience. TLS 1.3 represents a pivotal turning point for HTTPS performance. Modern mobile networks will routinely add over 100ms of latency to each request. TLS 1.3 makes page load times significantly faster for mobile devices, improv…

• 6 replies
• 12.8k views

TheHolbi replied January 25Jan 25

Hi, this week I got a lot of attack which was on the below path: 2025/01/12 15:02:08 [error] 762#762: *1768584 openat() "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/ALFA_DATA/alfacgiapi/bash.alfa" failed (2: No such file or directory), client: 68.183.234.75, server: mysite.com, request: "GET /.well-known/pki-validation/ALFA_DATA/alfacgiapi/bash.alfa HTTP/2.0", host: "www.mysite.com" and they trying to redirecting the website on which one they want, as well there was a huge DDoS attack on same path. kindly advice me on how can make it secure the centos 7 with cwp please. I put a scenario below for some security step : edit htaccess file on the root by:…

• 1 reply
• 192 views

Netino replied January 16Jan 16

There are lot’s of complains regarding the netdata not working or installing in CWP to fix the issue please follow the easy fix : you will need top install these dependencies before installing netdata from cwp : First uninstall netdata : /usr/local/src/netdata/packaging/installer/netdata-uninstaller.sh --yes --force Install dependencies : yum install lz4-devel lz4 json-c-devel libuv-devel libuv --nobest yum install libyaml-develafter these depes are installed go to cwp admin » netdata » and install to from there Installation can take few time depending on your server performance.

• 6 replies
• 1.9k views
• 1 follower

enetworkassociates replied January 7Jan 7

Hello there, first post here, congratulations for the excellent work. So I’m running Apache 2.4.62 + suPHP 0.72 on my CWP Pro server and I would like to activate the module_socache_redis since I’m using Redis. However I haven't found any opinion if that would create any positive benefit or not. I tried this configuration as a starting point (based on the Gemini Advanced suggestion) LoadModule socache_redis_module modules/mod_socache_redis.so <IfModule socache_redis_module> RedisConnectionPool 127.0.0.1:6379 10 keepalive 10000 300 RedisTimeout 1000 </IfModule> Is that a good starting point? Looking forward to your thoughts.

• 4 replies
• 829 views
• 1 follower

mind5t0rm replied December 30, 2024Dec 30

Is there a way to get it to backup it to a TAR without it beeing compressed? I have several large mail accounts that use like 2 hours to backup. OR is there a way to do a sort of manual script for backup that is possible to then again import if i need to recover an account? One of my accounts started backup at: 2024-12-29 01:59:06 and finished at 2024-12-29 05:30:39 its like 15gb account, and of those there are like 13GB emails. IF i could just make my backups faster and have the possibility to import it again i would like that.

In the last version of CWP I noticed that the account transfer from CWP to CWP has stopped working. It complains that there are not enough access rights in the key provided: That means 1. the communication and the password, as well as the port settings are all working, as the key can be checked. 2. There must be a new bug as this has definitely worked before 3. Even I click all possible additional access rights (which are apparently not needed by the preset function CWP to CWP) the error remains. For a complete server migration, just migrating the user accounts apparently is not enough. All internal settings of CWP, PHP, Webserver settings h…

• 9 replies
• 4.4k views
• 2 followers

Ling replied December 29, 2024Dec 29

Hello, suddenly i can not login the root or the user panel. i got this erro: 502 Bad Gateway - cwpsrv i tried : systemctl start cwp-phpfpm and got this: Failed to start cwp-phpfpm.service: Unit cwp-phpfpm.service not found. tried : [root@panel scripts]# ./restart_cwpsrv Failed to restart cwpsrv-phpfpm.service: Unit cwpsrv-phpfpm.service not found. Failed to restart cwp-phpfpm.service: Unit cwp-phpfpm.service not found. [root@panel scripts]# systemctl status cwp-phpfpm Unit cwp-phpfpm.service could not be found. [root@panel scripts]# tail /usr/local/cwp/php71/var/log/php-fpm.log [28-Dec-2024 05:46:44] WARNING: [pool cwpsrv] child 713668 said into stderr: "sed: couldn't…

• 1 reply
• 612 views
• 1 follower

Sandeep B. replied December 29, 2024Dec 29

Hello Sandeep, im running CWP Distro Name: AlmaLinux release 8.10 (Cerulean Leopard) Kernel Version: 4.18.0-553.33.1.el8_10.x86_64 on a HPE proliant ml 350 p this system has 4 separated NICs. 2 nics in use for public ips fro the cwp server Shared ip and DNS. 1 nic in use for lan IP and access from LAN, 1 nic left. Since i have 1 public ip left that i can add to the left over nic is it possible to use that for ad-guard home Linux install. i had it running on a separate windows box but i want to consolidate. since the web server is always on and i have lots of cpu resources and memory avail… can you please advise and how to make it possible. ? The adguard home may be acc…

Hi, dear masters I having issue with my rDNS which are showing rDNS/PTR = FAILED I have attached a screen shot for further help and kindly guide me on how can resolve this issue. Postfix Mail Server Manager Rebuild your mail server with Amavisd, Spamassassin, ClamAV (AntiSpam and AntiVirus Protection) Hostname needs to have a valid A record and rDNS/PTR set for successful email delivery. **Reject the request when the hostname in the client HELO (EHLO) command has no DNS A or MX record. The unknown_hostname_reject_code specifies the response code to rejected requests (default: 450). Your Hostname is: cloud.signalprime.com and it resolves to IP: ; <<>> DiG 9…

• 4 replies
• 1.1k views

Navid replied December 12, 2024Dec 12

every email i send is stuck in Postfix Mail queue

• 3 replies
• 1k views

Leebrimlow replied December 4, 2024Dec 4

Hi guys out there. Hi Sandeep. Is there any viable migration script out there for server migration? CWP Server1 IPV41 hostname1 websites emails accounts all running flawlessly CWP Server 2 IPV42 hostname2 Almalinux 8.10 minimal, SSH running on same port, both SSH certificate based login, OS installed, no CWP installed, no software installed. sh servermigrate.sh copies all software, databases, CWP, websites in one flash reboots and afterwards everything is running (after DNS A records change of course) IS THIS A DREAM? Someone out there must have done this already. Currently I am held hostage by a fraudulent provider and can not migrate, because my programming skills are t…

• 9 replies
• 2.6k views

Ling replied November 29, 2024Nov 29

I need to Upgrade MariaDB to 10.6.20 How is that without any errors or server downtime?

× httpd.service - The Apache HTTP Server Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; preset: disabled) Drop-In: /usr/lib/systemd/system/httpd.service.d └─php-fpm.conf Active: failed (Result: exit-code) since Sun 2024-11-24 16:10:33 +0530; 56s ago Docs: man:httpd.service(8) Process: 2896 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE) Main PID: 2896 (code=exited, status=1/FAILURE) Status: "Reading configuration..." CPU: 36ms Nov 24 16:10:33 vps.itstarter.cloud systemd[1]: Starting The Apache HTTP Server... Nov 24 16:10:33 vps.itstarter.cloud httpd[2896]: AH00526: Synt…

• 1 reply
• 1k views

Sandeep B. replied November 24, 2024Nov 24

The supposed installation process in CWP does not start by itself anymore. The only option left is to manually install it from SSH using the kickstart.sh, requiring a lot of afterworks, especially for password protecttion I think the idea was to provide a seamlessly integrated netdata with password protecton out of the box.....accessible from the controlpanel as well as from outside.

• 2 replies
• 1.4k views

Sandeep B. replied November 18, 2024Nov 18

Why is this disk usage so insanely large? Its OK that it uses 40gb on email, but the webpage isnt that big. 1 gb, my total would say that he uses around 42gb disk. How can this be explained?

• 3 replies
• 1.5k views

Sandeep B. replied November 18, 2024Nov 18