Skip to main content

Posts

Installation Perquisite for EFA/Cpanel/CWP7/VestaCP: Part 2 Disable Firewalld

CentOS 7 comes with firewalld by default. So disable firewalld because Cpanel & CWP uses CSF Firewall & LFD with IPTables. Here CSF - ConfigServer Security & Firewall LFD - Login Failure Daemon # systemctl stop firewalld.service # systemctl disable firewalld.service Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service. Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. # systemctl mask firewalld.service Created symlink from /etc/systemd/system/firewalld.service to /dev/null. Reboot your server so that all updates can take affect and then check your Firewalld Status. # reboot # systemctl status firewalld In EFA , FirewallD & Fail2Ban Intrusion Detector comes with by default. But I prefer to use CSF. So i will disable firewalld services.  

Installation Perquisite for EFA/Cpanel/CWP7/VestaCP: Part 1 Disable SeLinux

SELinux is an acronym for Security-enhanced Linux. It is a security feature of the Linux kernel. It is designed to protect the server against misconfigurations and/or compromised daemons. In the Linux kernel, SELinux relies on mandatory access controls (MAC) that restrict users to rules and policies set by the system administrator. MAC is a higher level of access control than the standard discretionary access control (DAC) , and prevents security breaches in the system by only processing necessary files that the administrator pre-approves. SELinux was initially released as a collaborative between Red Hat and the National Security Agency . SELinux receives periodic updates and additions as new Linux distributions are released. SELinux modes There are three modes of SELinux: Enforcing, Permissive and Disabled. Enforcing mode is the default mode at installation of SELinux. It will enforce the policies on the system, deny access and log actions. Permissive mode is the most com

CWP: After adding Hostname SSL, Roundcube unable to load the message in a Frame (Solved)

I have successfully added Let's Encrypt SSL certificate for my Sever Hostname/FQDN but the issue is that When I am logging on my Roundcube mail , The messages is not showing on a same Frame. Open the file # vi /usr/local/apache/conf.d/ssl.conf Header always set X-Frame-Options DENY and can be changed to # vi /usr/local/apache/conf.d/ssl.conf Header always set X-Frame-Options SAMEASORIGIN Now login to your webmail and check .

Solved : CWP Roundcube Login Problem [ Connection to storage server failed ]

I'm getting problem after CWP mail server migration from existing server to new server. It's showing   Connection to storage server failed , General Troubleshooting Tips Run “postfix check” to make Postfix look for obvious configuration errors. If it returns no output then no problem was found. Read your /var/log/dovecot.log & /var/log/mail.log and look for warnings and errors. I'm getting the following information from  /var/log/dovecot.log I get “Permission denied” from Dovecot in the mail.log file. You have the permissions wrong. Run the following command # chown -R vmail:mail /var/vmail Finally all user's of that domain can login successfully . This post is based on this article. Link 1 Link 2

CWP: How to check Roundcube All Configuration using Roundcube Webmail Installer

I am going to show you that How to check Roundcube All Configuration using Roundcube Webmail Installer. In this way you will see all the details about PHP version, missing PHP extensions, available databases, required 3rd party libs, php.ini/.htaccess settings and many more details. Image 1 Let's do the following [root@host ~]# cd /usr/local/src/ [root@host src]# git clone https://github.com/roundcube/roundcubemail.git Cloning into 'roundcubemail'... remote: Enumerating objects: 210, done. remote: Counting objects: 100% (210/210), done. remote: Compressing objects: 100% (141/141), done. remote: Total 117796 (delta 72), reused 130 (delta 63), pack-reused 117586 Receiving objects: 100% (117796/117796), 57.28 MiB | 1.62 MiB/s, done. Resolving deltas: 100% (81855/81855), done. Go to the following directory [root@host src]# cd roundcubemail/ [root@host roundcubemail]# pwd /usr/local/src/roundcubemail [root@host roundcubemail]# cp -rvf installer /usr/local/cwpsrv/var/s