Vesta Control Panel - Forum

Yesterday I installed 0.9.8-20 on a fresh vultr centos 7.4 everything was fine the whole day until I ran yum update today, centos and vesta had updates so I accepted them and then the server was infected. Now I am afraid to run yum update after installing vesta. So I guess 0.9.8-20 is affected as w...

in my case : all vesta which are not install exim and dovecot are safe --exim no --dovecot no (while install) but some of my vesta which install exim and dovecot were infected with gcc.sh To add to that, I shut down the panel on two servers hosting hundreds of customers late last night (US/Central,...

Can it be confirmed whether the patch contained generic security fixes that were proposed to potentially be connected or if the patch is designed to directly address the common attack vector used to compromise servers in the last 48 hours?

nextgi wrote: ↑

Sun Apr 08, 2018 8:23 pm

The best way to secure just about any web application is to use a firewall. White list the hosts that are necessary.

Doesn't cut down the support tickets much though ;)

New commits here: https://github.com/serghey-rodin/vesta/commits/master I'm interested to see whether these commits are known to be related to the issue or just things discussed in the thread and taken as likely candidates. Whether this is patching the hole or just boarding up a few windows that mi...

while only you could not see the api of vesta to be accessed (because all vesta access logging goes to /dev/null per default) What are you doing to your installs? All of my API access is logged to /usr/local/vesta/log/system.log. Also auth for API is logged to /usr/local/vesta/log/auth.log. If the ...

while only you could not see the api of vesta to be accessed (because all vesta access logging goes to /dev/null per default) What are you doing to your installs? All of my API access is logged to /usr/local/vesta/log/system.log. Also auth for API is logged to /usr/local/vesta/log/auth.log. If the ...

Many thanks. I think I can use IMAP but I'm not sure. I have one question about the process to import the account with all old mails to the VestaCP mail accounts. When I do that process, have I to create a new account in VestaCP manually or appears automatically? You would need to manually create t...

Check that the A record points to the correct IP, verify that the virtual host is configured properly in /home/username/conf/web in the relevant files, which may be any combination of apache2.conf, sapache2.conf, httpd.conf, shttpd.conf, nginx.conf, snginx.conf. You'll need to know a little about vi...

Can you use IMAP? Here's a guide for Ubuntu.

https://www.jverdeyen.be/ubuntu/imapsync-on-ubuntu/