Page 4 of 16

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Tue Feb 02, 2016 11:40 am
by SS88
amitz wrote:Hello,

yes i manully did the changes in /usr/local/vesta/web/templates/admin/panel.html
It worked but now it isn't.
If you do not see the CSF link then something has overwritten the file: /usr/local/vesta/web/templates/admin/panel.html

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Feb 15, 2016 1:43 pm
by brancalhone
Thanks, it worked very well here.

it is possible to access the menu "View basic system statistics" in the CSF, to see the graphs it generates?

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Feb 15, 2016 1:48 pm
by SS88
brancalhone wrote:Thanks, it worked very well here.

it is possible to access the menu "View basic system statistics" in the CSF, to see the graphs it generates?
I imagine so. You need GD::Graph installed, and this option enabled.

Note: Disk graphs do not show on Virtuozzo/OpenVZ servers as the kernel on
those systems do not store the required information in /proc/diskstats
On new installations or when enabling this option it will take time for these
graphs to be populated

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 10:52 am
by leisegang
i installed Vesta with iptables and fail2ban.

When i go to server to view running processes the iptables says uptime 0 minutes always, and it is grey (not running)
doing a service iptables status in terminal gives me this:

Code: Select all

Redirecting to /bin/systemctl status  iptables.service
 iptables.service - IPv4 firewall with iptables
   Loaded: loaded (/usr/lib/systemd/system/iptables.service; enabled; vendor preset: disabled)
   [color=#00BF00]Active: active (exited)[/color] since Sun 2016-03-06 18:14:53 CET; 17h ago
  Process: 131 ExecStart=/usr/libexec/iptables/iptables.init start (code=exited, status=0/SUCCESS)
 Main PID: 131 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/iptables.service

Mar 06 18:12:13 server systemd[1]: Stopping IPv4 firewall with iptables...
Mar 06 18:12:13 server iptables.init[871]: iptables: Setting chains to polic...]
Mar 06 18:12:13 server iptables.init[871]: iptables: Flushing firewall rules...]
Mar 06 18:12:13 server iptables.init[871]: iptables: Unloading modules: [  OK  ]
Mar 06 18:12:13 server systemd[1]: Stopped IPv4 firewall with iptables.
Mar 06 18:14:53 server systemd[1]: Starting IPv4 firewall with iptables...
Mar 06 18:14:54 server iptables.init[131]: iptables: Applying firewall rules...]
Hint: Some lines were ellipsized, use -l to show in full.
it seems that i have no blocked IPs OR nothing in fail to ban. but sucuri is sending emails about loads of attemts to access sites.

also i get messages about people trying to connect to ssh. but i cant see any blocks...

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 12:03 pm
by SS88
leisegang wrote:i installed Vesta with iptables and fail2ban.

When i go to server to view running processes the iptables says uptime 0 minutes always, and it is grey (not running)
doing a service iptables status in terminal gives me this:

Code: Select all

Redirecting to /bin/systemctl status  iptables.service
 iptables.service - IPv4 firewall with iptables
   Loaded: loaded (/usr/lib/systemd/system/iptables.service; enabled; vendor preset: disabled)
   [color=#00BF00]Active: active (exited)[/color] since Sun 2016-03-06 18:14:53 CET; 17h ago
  Process: 131 ExecStart=/usr/libexec/iptables/iptables.init start (code=exited, status=0/SUCCESS)
 Main PID: 131 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/iptables.service

Mar 06 18:12:13 server systemd[1]: Stopping IPv4 firewall with iptables...
Mar 06 18:12:13 server iptables.init[871]: iptables: Setting chains to polic...]
Mar 06 18:12:13 server iptables.init[871]: iptables: Flushing firewall rules...]
Mar 06 18:12:13 server iptables.init[871]: iptables: Unloading modules: [  OK  ]
Mar 06 18:12:13 server systemd[1]: Stopped IPv4 firewall with iptables.
Mar 06 18:14:53 server systemd[1]: Starting IPv4 firewall with iptables...
Mar 06 18:14:54 server iptables.init[131]: iptables: Applying firewall rules...]
Hint: Some lines were ellipsized, use -l to show in full.
it seems that i have no blocked IPs OR nothing in fail to ban. but sucuri is sending emails about loads of attemts to access sites.

also i get messages about people trying to connect to ssh. but i cant see any blocks...
Interesting. Try removing iptables from Vesta's configuration. That way Vesta will never try to start iptables and add in it's own rules.

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 12:18 pm
by leisegang

Code: Select all

#FIREWALL_SYSTEM='iptables'

FIREWALL_EXTENSION='fail2ban'
in my vesta.conf file.

What about fail2ban? should i disable that too?

isnt CSF doing much of the same? or can i use both together?
i want wordpress to add rules to fail2ban when someone is getting 5 wrong logins.

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 12:21 pm
by SS88
leisegang wrote:

Code: Select all

#FIREWALL_SYSTEM='iptables'

FIREWALL_EXTENSION='fail2ban'
in my vesta.conf file.

What about fail2ban? should i disable that too?

isnt CSF doing much of the same? or can i use both together?
i want wordpress to add rules to fail2ban when someone is getting 5 wrong logins.
Fail2ban for me is disabled and removed, only because CSF can do what you ask, but they both can work together.

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 12:26 pm
by leisegang
can i just use yum remove iptables and yum remove fail2ban?

Or how do i remove them?

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 12:32 pm
by SS88
leisegang wrote:can i just use yum remove iptables and yum remove fail2ban?

Or how do i remove them?
That will work but may do something with Vesta until you also remove them from the configuration file.

/usr/local/vesta/conf/vesta.conf

Values should be:

FIREWALL_SYSTEM=''
FIREWALL_EXTENSION=''

Re: [HOWTO] Install CSF + Use it's GUI in VestaCP

Posted: Mon Mar 07, 2016 12:39 pm
by leisegang
Now i just get this:
NO LANGUAGE DEFINED

when trying to log in at the server web panel at port 8083


2016/03/07 13:43:09 [error] 31635#0: *5 FastCGI sent in stderr: "PHP message: PHP Warning: Unknown: write failed: Disk quota exceeded (122) in Unknown on line 0
PHP message: PHP Warning: Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0" while reading upstream, client: 85.xx.xx.xx, server: _, request: "POST /login/ HTTP/1.1", upstream: "fastcgi://unix:/var/run/vesta-php.sock:", host: "domain.no:8083", referrer: "https://domain.no:8083/login/"