Hi,

Just debugged some extreem errors.
When you install nginx with modsecurity with the default settings nginx become a memory hog (Took 3.1Gb memory instead of 60Mb).
Opening custom httpd configuration took 5-10 seconds while without it is less then a second.

https://developers.google.com/speed/pagespeed/insights/
gave a 20% lesser score.

Restarting nginx took 10-15 seconds while without it is in about 1-2 seconds.

[root@s2 scripts]# ./dkim_create.sh aaaaa.nl
[root@s2 scripts]# ./dkim_create.sh bbbbb.nl
Generating RSA private key, 2048 bit long modulus
.................+++
...................+++
e is 65537 (0x10001)
writing RSA key

Same user account, for one domain (bbbbb.nl) the DKIM is generated, for aaaaa.nl nothing happens?

If you check letsencrypt.sh you can see it determines if it is a request for the server hostname like this:
1. The domain must not be in /etc/virtual/domainowners
2. The domain must be in /etc/virtual/domains
3. The output of "/usr/local/directadmin/directadmin c | grep serveame" must match the domain you are requesting it for.

if the certificate you are requesting matches this it'll be treated as a cert for the hostname.

The letsencrypt.sh script will create the san config if it does not yet exist, so you should be able to move it just fine and then request the cert, granted other conditions are met. It's simply re-using the existing SAN, but removing (or editing) it shouldn't matter.

Report that the RBL combined.rbl.msrbl.net has stopped working.
Removed from all exim.conf versions.

The update is now on files1 and files2. To get the update, use CustomBuild 2.0:

cd /usr/local/directadmin/custombuild
./build update
./build exim_conf

Related if using older CustomBuild with exim.conf 4.x:
https://help.directadmin.com/item.php?id=51

Other solutions are to manually remove the combined.rbl.msrbl.net line from your /etc/exim.conf RBL_DNS_LIST entry.

Note, SpamBlocker 2.x versions are not affected, as they were not using this RBL.

John

Is it possible for mirrors to sync multiple times a day? I use files6 and that mirror only syncs one time every day (10:00). For normal updates it's fine but for example with the pulled PHP 7.0.20 update or the exim.conf 4.5.5 update (not working RBL) it would be nice if updates came a lot quicker

For one of our customers we needed to let a company perform a 'penetration' test on the website on our managed VPS. We have done this before but never any major problems. In this case it wears out the server. The server load spikes to around 35. Since there is a production website of the customer on that VPS we complained to the company performing the penetration test because the website went very slow/offline. They say their test should not be that heavy and something is wrong with the vps. Specs of the VPS:

CentOS7 + Directadmin + fail2ban + CSF
2 CPU - 4GB memory
low on traffic]
Normal average load around 0.4, when test is ruing between 30/35.

Everything works fine but when they start testing the server goes down. Can you give any advice? Can we do something about this?

I've got 3 servers setup with DA and everything including DKIM exactly the same.

The only thing changed was the exim.conf to 4.5.5 update last night, because of the removal of 1 blacklist. And then the users on this one server could not send out messages anymore, they were refused as being spam.

Reason of spam: Waing: DKIM: Invalid. reason='pubkey_unavailable'.

So I removed all DKIM now for a quick fix. But how is this possible? All 3 servers have the 4.5.5 exim.conf an both others do not have this issue after updating the exim.conf last night.

What can be the reason this problem occured?

When a user enables a vacation message, the autoreply will be generated and sent by the DirectAdmin server. The problem appears when the e-mail is checked for DMARC because the server is not the e-mail domain.

Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of [email protected] designates 2a01:qqq:fffb:403:qqqq:ff:fe4a:5aa8 as permitted sender) smtp.helo=s2.qqqq.nl;
       dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=arjenzzzz.nl

Hi there, i'm trying to install Vaish 4 on a CentOS 7 system, following this walkthrough: https://devops.profitbricks.com/tuto...e-on-centos-7/.

Vaish seems to be working but when I visit the page I just see "Apache functioning normally". When I go to [siteUrl]:8080 i'm getting "coection refused".

It seems as if the port isn't forwarded correctly, is that something Direct Admin might cause? I don't know where to look anymore.

Any help would be appreciated!

Hello all!

I've been busy with my servers and i want to enable SSH for all users (Cloudlinux + Cagefs).

To do this i've been wanting to enable it for all users in bulk.

for this i've used:

 files=`find . -name "user.conf"`; for file in $files; do sed -i $file -e "s,ssh=OFF,ssh=ON,g"; done;

Would it be possible to add a line below to combine the key and cert eg.

cat ${APACHECERT} ${APACHECERT} > ${APACHECERTCOMBINED}
cat ${APACHEKEY} ${APACHECERT} > ${APACHEWEBMINCOMBINED}

&

cat ${NGINXCERT} ${NGINXCERT} > ${NGINXCERTCOMBINED}
cat ${NGINKEY} ${NGINXCERT} > ${NGINXWEBMINCOMBINED}

but only when the hostname is appended to the script.

Nb. I know we can use our custom directory, but it's only ~5 lines being added and edited.

Would be useful for us who use webmin.

EDIT: I've attached my modified script, it should work. If anyone has webmin, please test it.

I am currently manging multiple VPS's ruing Exim as its mailserver. With all the security and hacking going on in the world i thought it best to install a wildcard SSL certificate on Exim. Although this works it will identify to my customers with the wildcard certificate of the server instead of the SSL certifcate of the user. This of course is not the most transparent of pretty solution.

Would it be possible to setup a dynamic forwarder so i can give my customers one single URL which figures out itself to which IP-address it needs to forward?

Hello,

Php 7.0.20 was briefly in the versions.txt, but we've had to downgrade it back to 7.0.19.
We're not yet sure, but it could be an introduced bug.

We rely on the 50-webapps.ini file to overload the session.save_path and disable functions for just [PATH=/var/www/html].
However, with 7.0.20, this overloading applies to *all* settings on the server, all Users, and even for php -i calls in ssh.

Downgrading to 7.0.19 brings us back to having the [PATH=/var/www/html] correctly affect only that area.

John