Apache stop working

Discussion in 'Installation/Configuration' started by pecka33, Sep 24, 2023.

Page 2 of 3
  1. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Sighed. Extract from first part of: https://forum.howtoforge.com/threads/please-read-before-posting.58408/

    To start the test, run the following command as root user on your server:

    Code:
    Code:
    wget -q -O htf-common-issues.php "http://gitplace.net/pixcept/ispconfig-tools/raw/stable/htf-common-issues.php" && php -q htf-common-issues.php
    to view the report, run this command:

    Code:
    Code:
    cat htf_report.txt | more
    IP addresses are already anonymized in the report, so you can post it safely here in the forum.
     
    ahrasis, Sep 24, 2023
    #21
  2. pecka33

    pecka33 Member

    Thank you. But when i type your command i get just Segmentation fault
    On my server is Default php 74. I tried to install it again and get
    Code:
    4-fpm.service - The PHP 7.4 FastCGI Process Manager.
dpkg: error processing package php7.4-fpm (--configure):
 installed php7.4-fpm package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 php7.4-fpm
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up php7.4-fpm (1:7.4.33-8+0~20230904.88+debian11~1.gbp87c414) ...
NOTICE: Not enabling PHP 7.4 FPM by default.
NOTICE: To enable PHP 7.4 FPM in Apache2 do:
NOTICE: a2enmod proxy_fcgi setenvif
NOTICE: a2enconf php7.4-fpm
NOTICE: You are seeing this message because you have apache2 package installed.
Job for php7.4-fpm.service failed because a fatal signal was delivered to the control process.
See "systemctl status php7.4-fpm.service" and "journalctl -xeu php7.4-fpm.service" for details.
invoke-rc.d: initscript php7.4-fpm, action "start" failed.
× php7.4-fpm.service - The PHP 7.4 FastCGI Process Manager
     Loaded: loaded (/lib/systemd/system/php7.4-fpm.service; enabled; preset: enabled)
     Active: failed (Result: signal) since Mon 2023-09-25 01:21:07 CEST; 7ms ago
       Docs: man:php-fpm7.4(8)
    Process: 79665 ExecStart=/usr/sbin/php-fpm7.4 --nodaemonize --fpm-config /etc/php/7.4/fpm/php-fpm.conf (code=killed, signal=SEGV)
    Process: 79666 ExecStopPost=/usr/lib/php/php-fpm-socket-helper remove /run/php/php-fpm.sock /etc/php/7.4/fpm/pool.d/www.conf 74 (code=exited, status=0/SUCCESS)
   Main PID: 79665 (code=killed, signal=SEGV)
        CPU: 28ms

Sep 25 01:21:07 samantos systemd[1]: Starting php7.4-fpm.     Loaded: loaded (/lib/systemd/system/php7.4-fpm.service; enabled; preset: enabled)
     Active: failed (Result: signal) since Mon 2023-09-25 01:24:47 CEST; 19ms ago
       Docs: man:php-fpm7.4(8)
    Process: 81410 ExecStart=/usr/sbin/php-fpm7.4 --nodaemonize --fpm-config /etc/php/7.4/fpm/php-fpm.conf (code=killed, signal=SEGV)
    Process: 81411 ExecStopPost=/usr/lib/php/php-fpm-socket-helper remove /run/php/php-fpm.sock /etc/php/7.4/fpm/pool.d/www.conf 74 (code=exited, status=0/SUCCESS)
   Main PID: 81410 (code=killed, signal=SEGV)
        CPU: 26ms

Sep 25 01:24:47 samantos systemd[1]: Starting php7.4-fpm.service - The PHP 7.4 FastCGI Process Manager...
Sep 25 01:24:47 samantos systemd[1]: php7.4-fpm.service: Main process exited, code=killed, status=11/SEGV
Sep 25 01:24:47 samantos systemd[1]: php7.4-fpm.service: Failed with result 'signal'.
Sep 25 01:24:47 samantos systemd[1]: Failed to start php7.4-fpm.service - The PHP 7.4 FastCGI Process Manager.
dpkg: error processing package php7.4-fpm (--configure):
 installed php7.4-fpm package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 php7.4-fpm
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@samantos:~#
    i tried to purge it etc but does not help.
     
    pecka33, Sep 25, 2023
    #22
  3. pecka33

    pecka33 Member

    I did reboot and works. Output is. Thank you so much

    Code:
    address (as per hostname): ***.***.***.***
[WARN] could not determine server's ip address by ifconfig
[INFO] OS version is Debian GNU/Linux 12 (bookworm)
 
[INFO] uptime:  01:42:43 up 10 min,  1 user,  load average: 1.02, 0.99, 0.70
 
[INFO] memory:
               total        used        free      shared  buff/cache   available
Mem:            31Gi       1.5Gi        29Gi        44Mi       1.0Gi        29Gi
Swap:          5.8Gi          0B       5.8Gi
 
[INFO] systemd failed services status:
  UNIT                     LOAD   ACTIVE SUB    DESCRIPTION
● clamav-clamonacc.service loaded failed failed ClamAV On-Access Scanner
● php7.0-fpm.service       loaded failed failed The PHP 7.0 FastCGI Process Manager

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
2 loaded units listed.

[INFO] ISPConfig is installed.

##### ISPCONFIG #####
ISPConfig version is 3.2.11


##### VERSION CHECK #####

[INFO] php (cli) version is 7.4.33
[INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.33

##### PORT CHECK #####

[WARN] Port 8080 (ISPConfig) seems NOT to be listening

##### MAIL SERVER CHECK #####


##### RUNNING SERVER PROCESSES #####

[INFO] I found the following web server(s):
        Apache 2 (PID 999)
[INFO] I found the following mail server(s):
        Postfix (PID 1375)
[INFO] I found the following pop3 server(s):
        Dovecot (PID 764)
[INFO] I found the following imap server(s):
        Dovecot (PID 764)
[INFO] I found the following ftp server(s):
        PureFTP (PID 1436)

##### LISTENING PORTS #####
(only           ()
Local           (Address)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:53          (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:953         (769/named)
[localhost]:3306                (884/mariadbd)
[localhost]:6379                (779/redis-server)
[localhost]:10023               (823/postgrey)
[localhost]:11334               (883/rspamd:)
[localhost]:11332               (883/rspamd:)
[localhost]:11333               (883/rspamd:)
[anywhere]:4190         (764/dovecot)
[localhost]:11211               (768/memcached)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
***.***.***.***:53              (769/named)
[anywhere]:587          (1375/master)
[anywhere]:993          (764/dovecot)
[anywhere]:995          (764/dovecot)
[anywhere]:143          (764/dovecot)
[anywhere]:110          (764/dovecot)
[anywhere]:25           (1375/master)
[anywhere]:21           (1436/pure-ftpd)
[anywhere]:22           (822/sshd:)
[anywhere]:465          (1375/master)
*:*:*:*::*:6379         (779/redis-server)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*5265:f3ff:fef0:53             (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:53           (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:953          (769/named)
*:*:*:*::*:8081         (999/apache2)
*:*:*:*::*:4190         (764/dovecot)
*:*:*:*::*:11334                (883/rspamd:)
*:*:*:*::*:11333                (883/rspamd:)
*:*:*:*::*:11332                (883/rspamd:)
*:*:*:*::*:587          (1375/master)
*:*:*:*::*:993          (764/dovecot)
*:*:*:*::*:995          (764/dovecot)
[localhost]43           (764/dovecot)
*:*:*:*::*:80           (999/apache2)
[localhost]10           (764/dovecot)
*:*:*:*::*:25           (1375/master)
*:*:*:*::*:21           (1436/pure-ftpd)
*:*:*:*::*:22           (822/sshd:)
*:*:*:*::*:465          (1375/master)
*:*:*:*::*:443          (999/apache2)
*:*:*:*::*:10023                (823/postgrey)




##### IPTABLES #####
Chain INPUT (policy DROP)
target     prot opt source               destination         
f2b-sshd   6    --  [anywhere]/0            [anywhere]/0            multiport dports 22
ufw-before-logging-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-before-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-logging-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-reject-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-track-input  0    --  [anywhere]/0            [anywhere]/0           

Chain FORWARD (policy DROP)
target     prot opt source               destination         
ufw-before-logging-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-before-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-logging-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-reject-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-track-forward  0    --  [anywhere]/0            [anywhere]/0           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ufw-before-logging-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-before-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-logging-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-reject-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-track-output  0    --  [anywhere]/0            [anywhere]/0           

Chain f2b-sshd (1 references)
target     prot opt source               destination         
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***         [anywhere]/0            reject-with icmp-port-unreachable
RETURN     0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-after-forward (1 references)
target     prot opt source               destination         

Chain ufw-after-input (1 references)
target     prot opt source               destination         
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:137
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:138
ufw-skip-to-policy-input  6    --  [anywhere]/0            [anywhere]/0            tcp dpt:139
ufw-skip-to-policy-input  6    --  [anywhere]/0            [anywhere]/0            tcp dpt:445
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:67
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:68
ufw-skip-to-policy-input  0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type BROADCAST

Chain ufw-after-logging-forward (1 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-after-logging-input (1 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-after-logging-output (1 references)
target     prot opt source               destination         

Chain ufw-after-output (1 references)
target     prot opt source               destination         

Chain ufw-before-forward (1 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 3
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 11
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 12
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 8
ufw-user-forward  0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-before-input (1 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           
ACCEPT     0    --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
ufw-logging-deny  0    --  [anywhere]/0            [anywhere]/0            ctstate INVALID
DROP       0    --  [anywhere]/0            [anywhere]/0            ctstate INVALID
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 3
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 11
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 12
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 8
ACCEPT     17   --  [anywhere]/0            [anywhere]/0            udp spt:67 dpt:68
ufw-not-local  0    --  [anywhere]/0            [anywhere]/0           
ACCEPT     17   --  [anywhere]/0            ***.***.***.***          udp dpt:5353
ACCEPT     17   --  [anywhere]/0            ***.***.***.***      udp dpt:1900
ufw-user-input  0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-before-logging-forward (1 references)
target     prot opt source               destination         

Chain ufw-before-logging-input (1 references)
target     prot opt source               destination         

Chain ufw-before-logging-output (1 references)
target     prot opt source               destination         

Chain ufw-before-output (1 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           
ACCEPT     0    --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
ufw-user-output  0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-logging-allow (0 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "

Chain ufw-logging-deny (2 references)
target     prot opt source               destination         
RETURN     0    --  [anywhere]/0            [anywhere]/0            ctstate INVALID limit: avg 3/min burst 10
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-not-local (1 references)
target     prot opt source               destination         
RETURN     0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type LOCAL
RETURN     0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type MULTICAST
RETURN     0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type BROADCAST
ufw-logging-deny  0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10
DROP       0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-reject-forward (1 references)
target     prot opt source               destination         

Chain ufw-reject-input (1 references)
target     prot opt source               destination         

Chain ufw-reject-output (1 references)
target     prot opt source               destination         

Chain ufw-skip-to-policy-forward (0 references)
target     prot opt source               destination         
DROP       0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-skip-to-policy-input (7 references)
target     prot opt source               destination         
DROP       0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-skip-to-policy-output (0 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-track-forward (1 references)
target     prot opt source               destination         

Chain ufw-track-input (1 references)
target     prot opt source               destination         

Chain ufw-track-output (1 references)
target     prot opt source               destination         
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            ctstate NEW
ACCEPT     17   --  [anywhere]/0            [anywhere]/0            ctstate NEW

Chain ufw-user-forward (1 references)
target     prot opt source               destination         

Chain ufw-user-input (1 references)
target     prot opt source               destination         
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:20
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:21
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:22
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:25
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:80
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:443
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            multiport dports 40110:40210
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:110
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:143
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:465
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:587
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:993
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:995
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:53
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:8080
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:8081
ACCEPT     17   --  [anywhere]/0            [anywhere]/0            udp dpt:53
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:10000

Chain ufw-user-limit (0 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
REJECT     0    --  [anywhere]/0            [anywhere]/0            reject-with icmp-port-unreachable

Chain ufw-user-limit-accept (0 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-user-logging-forward (0 references)
target     prot opt source               destination         

Chain ufw-user-logging-input (0 references)
target     prot opt source               destination         

Chain ufw-user-logging-output (0 references)
target     prot opt source               destination         

Chain ufw-user-output (1 references)
target     prot opt source               destination         




##### LET'S ENCRYPT #####
acme.sh is installed in /root/.acme.sh/acme.sh


root@samantos:~#
     
    pecka33, Sep 25, 2023
    #23
  4. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    ahrasis, Sep 25, 2023
    #24
  5. pecka33

    pecka33 Member

    Thank you. I Changed php Version default to 8.2. I can not do changes via ispconfig - does not work same as all my websites.
    Dont know what u should check next. But at all before changes i have set the same patu for php

    i tried to use
    ispconfig_update.sh --force but does not work for my - i get error like Error : Table dbispconfig/xmpp_domain is corrupted. Please drop the table and recreate.

    In case i tried to remove dbispconfig database, download Backup od ispconfig few days Aho and tried to upload it to this new database, i get error like this ERROR 1146 (42S02) at line 21: Table 'dbispconfig.aps_instances' doesn't exist

    i thought that here should be tables without data. So i download sql install file from ispconfig, upload via my localhlost to phpmyadmin, clear all data in tables, to this samé database import my backup od ispconfig from my server - is ulploaded fine. After that i export file, upload it to FTP server and tried to import to this Db on my server. If i do it, i get error vis ispconfig update.
    In case i try to import backup direcetly via command i get error that tahle does not exist.
     
    pecka33, Sep 25, 2023
    #25
  6. pecka33

    pecka33 Member

    Output now is
    Code:
    # SERVER #####
IP-address (as per hostname): ***.***.***.***
[WARN] could not determine server's ip address by ifconf
ig
[INFO] OS version is Debian GNU/Linux 12 (bookworm)
 
[INFO] uptime:  08:52:50 up 17 min,  1 user,  load avera
ge: 0.95, 1.00, 0.82
 
[INFO] memory:
               total        used        free      shared
  buff/cache   available
Mem:            31Gi       1.6Gi        29Gi        53Mi
       1.1Gi        29Gi
Swap:          5.8Gi          0B       5.8Gi
 
[INFO] systemd failed services status:
  UNIT                     LOAD   ACTIVE SUB    DESCRIPT
ION
● clamav-clamonacc.service loaded failed failed ClamAV O
n-Access Scanner

LOAD   = Reflects whether the unit definition was proper
ly loaded.
ACTIVE = The high-level unit activation state, i.e. gene
ralization of SUB.
SUB    = The low-level unit activation state, values dep
end on unit type.
root@samantos:~# cat htf_report.txt

##### SERVER #####
IP-address (as per hostname): ***.***.***.***
[WARN] could not determine server's ip address by ifconfig
[INFO] OS version is Debian GNU/Linux 12 (bookworm)
 
[INFO] uptime:  08:52:50 up 17 min,  1 user,  load average: 0.95, 1.00, 0.82
 
[INFO] memory:
               total        used        free      shared  buff/cache   available
Mem:            31Gi       1.6Gi        29Gi        53Mi       1.1Gi        29Gi
Swap:          5.8Gi          0B       5.8Gi
 
[INFO] systemd failed services status:
  UNIT                     LOAD   ACTIVE SUB    DESCRIPTION
● clamav-clamonacc.service loaded failed failed ClamAV On-Access Scanner

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
1 loaded units listed.

[INFO] ISPConfig is installed.

##### ISPCONFIG #####
ISPConfig version is 3.2.11


##### VERSION CHECK #####

[INFO] php (cli) version is 8.2.10
[INFO] php-cgi (used for cgi php in default vhost!) is version 8.2.10

##### PORT CHECK #####

[WARN] Port 8080 (ISPConfig) seems NOT to be listening

##### MAIL SERVER CHECK #####


##### RUNNING SERVER PROCESSES #####

[INFO] I found the following web server(s):
        Apache 2 (PID 993928)
[INFO] I found the following mail server(s):
        Postfix (PID 1392)
[INFO] I found the following pop3 server(s):
        Dovecot (PID 785)
[INFO] I found the following imap server(s):
        Dovecot (PID 785)
[INFO] I found the following ftp server(s):
        PureFTP (PID 1455)

##### LISTENING PORTS #####
(only           ()
Local           (Address)
[anywhere]:4190         (785/dovecot)
[localhost]:10023               (831/postgrey)
[localhost]:11334               (847/rspamd:)
[localhost]:11332               (847/rspamd:)
[localhost]:11333               (847/rspamd:)
[localhost]:11211               (789/memcached)
[anywhere]:465          (1392/master)
[anywhere]:110          (785/dovecot)
[anywhere]:25           (1392/master)
[anywhere]:21           (1455/pure-ftpd)
[anywhere]:22           (866/sshd:)
[anywhere]:143          (785/dovecot)
[anywhere]:993          (785/dovecot)
[anywhere]:995          (785/dovecot)
[anywhere]:587          (1392/master)
[localhost]:6379                (800/redis-server)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
***.***.***.***:53              (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:953         (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:53          (790/named)
[localhost]:3306                (921/mariadbd)
*:*:*:*::*:8081         (993928/apache2)
*:*:*:*::*:4190         (785/dovecot)
*:*:*:*::*:10023                (831/postgrey)
*:*:*:*::*:11334                (847/rspamd:)
*:*:*:*::*:11332                (847/rspamd:)
*:*:*:*::*:11333                (847/rspamd:)
*:*:*:*::*:465          (1392/master)
*:*:*:*::*:443          (993928/apache2)
[localhost]10           (785/dovecot)
*:*:*:*::*:80           (993928/apache2)
*:*:*:*::*:25           (1392/master)
*:*:*:*::*:21           (1455/pure-ftpd)
*:*:*:*::*:22           (866/sshd:)
[localhost]43           (785/dovecot)
*:*:*:*::*:993          (785/dovecot)
*:*:*:*::*:995          (785/dovecot)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*5265:f3ff:fef0:53             (790/named)
*:*:*:*::*:587          (1392/master)
*:*:*:*::*:6379         (800/redis-server)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:53           (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)
*:*:*:*::*:953          (790/named)




##### IPTABLES #####
Chain INPUT (policy DROP)
target     prot opt source               destination         
f2b-postfix-sasl  6    --  [anywhere]/0            [anywhere]/0            multiport dports 25
f2b-sshd   6    --  [anywhere]/0            [anywhere]/0            multiport dports 22
ufw-before-logging-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-before-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-logging-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-reject-input  0    --  [anywhere]/0            [anywhere]/0           
ufw-track-input  0    --  [anywhere]/0            [anywhere]/0           

Chain FORWARD (policy DROP)
target     prot opt source               destination         
ufw-before-logging-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-before-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-logging-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-reject-forward  0    --  [anywhere]/0            [anywhere]/0           
ufw-track-forward  0    --  [anywhere]/0            [anywhere]/0           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ufw-before-logging-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-before-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-after-logging-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-reject-output  0    --  [anywhere]/0            [anywhere]/0           
ufw-track-output  0    --  [anywhere]/0            [anywhere]/0           

Chain f2b-postfix-sasl (1 references)
target     prot opt source               destination         
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
RETURN     0    --  [anywhere]/0            [anywhere]/0           

Chain f2b-sshd (1 references)
target     prot opt source               destination         
REJECT     0    --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***          [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***      [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***         [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***      [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
RETURN     0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-after-forward (1 references)
target     prot opt source               destination         

Chain ufw-after-input (1 references)
target     prot opt source               destination         
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:137
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:138
ufw-skip-to-policy-input  6    --  [anywhere]/0            [anywhere]/0            tcp dpt:139
ufw-skip-to-policy-input  6    --  [anywhere]/0            [anywhere]/0            tcp dpt:445
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:67
ufw-skip-to-policy-input  17   --  [anywhere]/0            [anywhere]/0            udp dpt:68
ufw-skip-to-policy-input  0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type BROADCAST

Chain ufw-after-logging-forward (1 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-after-logging-input (1 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-after-logging-output (1 references)
target     prot opt source               destination         

Chain ufw-after-output (1 references)
target     prot opt source               destination         

Chain ufw-before-forward (1 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 3
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 11
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 12
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 8
ufw-user-forward  0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-before-input (1 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           
ACCEPT     0    --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
ufw-logging-deny  0    --  [anywhere]/0            [anywhere]/0            ctstate INVALID
DROP       0    --  [anywhere]/0            [anywhere]/0            ctstate INVALID
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 3
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 11
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 12
ACCEPT     1    --  [anywhere]/0            [anywhere]/0            icmptype 8
ACCEPT     17   --  [anywhere]/0            [anywhere]/0            udp spt:67 dpt:68
ufw-not-local  0    --  [anywhere]/0            [anywhere]/0           
ACCEPT     17   --  [anywhere]/0            ***.***.***.***          udp dpt:5353
ACCEPT     17   --  [anywhere]/0            ***.***.***.***      udp dpt:1900
ufw-user-input  0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-before-logging-forward (1 references)
target     prot opt source               destination         

Chain ufw-before-logging-input (1 references)
target     prot opt source               destination         

Chain ufw-before-logging-output (1 references)
target     prot opt source               destination         

Chain ufw-before-output (1 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           
ACCEPT     0    --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
ufw-user-output  0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-logging-allow (0 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "

Chain ufw-logging-deny (2 references)
target     prot opt source               destination         
RETURN     0    --  [anywhere]/0            [anywhere]/0            ctstate INVALID limit: avg 3/min burst 10
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "

Chain ufw-not-local (1 references)
target     prot opt source               destination         
RETURN     0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type LOCAL
RETURN     0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type MULTICAST
RETURN     0    --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type BROADCAST
ufw-logging-deny  0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10
DROP       0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-reject-forward (1 references)
target     prot opt source               destination         

Chain ufw-reject-input (1 references)
target     prot opt source               destination         

Chain ufw-reject-output (1 references)
target     prot opt source               destination         

Chain ufw-skip-to-policy-forward (0 references)
target     prot opt source               destination         
DROP       0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-skip-to-policy-input (7 references)
target     prot opt source               destination         
DROP       0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-skip-to-policy-output (0 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-track-forward (1 references)
target     prot opt source               destination         

Chain ufw-track-input (1 references)
target     prot opt source               destination         

Chain ufw-track-output (1 references)
target     prot opt source               destination         
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            ctstate NEW
ACCEPT     17   --  [anywhere]/0            [anywhere]/0            ctstate NEW

Chain ufw-user-forward (1 references)
target     prot opt source               destination         

Chain ufw-user-input (1 references)
target     prot opt source               destination         
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:20
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:21
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:22
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:25
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:80
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:443
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            multiport dports 40110:40210
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:110
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:143
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:465
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:587
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:993
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:995
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:53
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:8080
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:8081
ACCEPT     17   --  [anywhere]/0            [anywhere]/0            udp dpt:53
ACCEPT     6    --  [anywhere]/0            [anywhere]/0            tcp dpt:10000

Chain ufw-user-limit (0 references)
target     prot opt source               destination         
LOG        0    --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
REJECT     0    --  [anywhere]/0            [anywhere]/0            reject-with icmp-port-unreachable

Chain ufw-user-limit-accept (0 references)
target     prot opt source               destination         
ACCEPT     0    --  [anywhere]/0            [anywhere]/0           

Chain ufw-user-logging-forward (0 references)
target     prot opt source               destination         

Chain ufw-user-logging-input (0 references)
target     prot opt source               destination         

Chain ufw-user-logging-output (0 references)
target     prot opt source               destination         

Chain ufw-user-output (1 references)
target     prot opt source               destination         




##### LET'S ENCRYPT #####
acme.sh is installed in /root/.acme.sh/acme.sh


root@samantos:~#
     
    pecka33, Sep 25, 2023
    #26
  7. pecka33

    pecka33 Member

    I can see there for exemple
    Code:
    Port 8080 (ISPConfig) seems NOT to be listening
     
    pecka33, Sep 25, 2023
    #27
  8. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Is your disk failing? Can you check that? What are apache2ctl test said?
     
    ahrasis, Sep 25, 2023
    #28
  9. pecka33

    pecka33 Member

    My disk working fine. When i use apache2ctl a get
    Code:
    root@samantos:~# apache2ctl
Usage: /usr/sbin/apache2ctl start|stop|restart|graceful|graceful-stop|configtest|status|fullstatus|help
       /usr/sbin/apache2ctl <apache2 args>
       /usr/sbin/apache2ctl -h            (for help on <apache2 args>)
    Code:
    root@samantos:~# systemctl --failed
  UNIT                     LOAD   ACTIVE SUB    DESCRIPTION
● clamav-clamonacc.service loaded failed failed ClamAV On-Access Scanner

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
1 loaded units listed.
root@samantos:~#
    Services
    Code:
    root@samantos:~# service --status-all
 [ - ]  apache-htcacheclean
 [ + ]  apache2
 [ + ]  apparmor
 [ - ]  clamav-daemon
 [ + ]  clamav-freshclam
 [ - ]  console-setup.sh
 [ + ]  cron
 [ + ]  dbus
 [ + ]  dovecot
 [ + ]  fail2ban
 [ + ]  haveged
 [ - ]  hwclock.sh
 [ - ]  keyboard-setup.sh
 [ + ]  kmod
 [ + ]  mariadb
 [ + ]  memcached
 [ + ]  named
 [ + ]  networking
 [ + ]  ntp
 [ + ]  ntpsec
 [ + ]  openbsd-inetd
 [ + ]  php5.6-fpm
 [ + ]  php7.0-fpm
 [ + ]  php7.1-fpm
 [ + ]  php7.2-fpm
 [ + ]  php7.3-fpm
 [ + ]  php7.4-fpm
 [ + ]  php8.0-fpm
 [ + ]  php8.1-fpm
 [ + ]  php8.2-fpm
 [ + ]  postfix
 [ + ]  postgrey
 [ + ]  procps
 [ + ]  pure-ftpd-mysql
 [ + ]  quota
 [ - ]  quotarpc
 [ + ]  redis-server
 [ + ]  resolvconf
 [ + ]  rspamd
 [ - ]  rsync
 [ + ]  ssh
 [ - ]  sudo
 [ + ]  udev
 [ + ]  ufw
 [ + ]  unattended-upgrades
 [ - ]  x11-common
     
    pecka33, Sep 25, 2023
    #29
  10. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Clamav is failing because it the update is rate limited, this stood in one of the error listings you posted. That message had instructions on what to do.
    Have you been up all night? Consider sleeping and looking at this afterwards with clear mind.
    What show commands
    Code:
    apache2ctl configtest
apache2ctl status
    And, it may be all the reinstalls and stuff you have been doing have made the situation worse. Is this a production system so you can not start from clean slate?
     
    Taleman, Sep 25, 2023
    #30
  11. pecka33

    pecka33 Member

    Thank you. I found something. Now i tried to do changes from perfect server, reconfigure ispconfig, ssl certificate and now looks like all working - not at all, sites without HTTPS shows Apache2 Debian Default Page, page like ispconfig, webmail etc. shows ERR_CONNECTION_REFUSED.

    Yes, this is production system.

    So looks like that sites without HTTPS working fine. I used your command

    Code:
    apache2ctl status
Syntax OK
                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.57 (Debian) OpenSSL/3.0.9
   Server MPM: prefork
   Server Built: 2023-04-13T03:26:51
     __________________________________________________________________

   Current Time: Monday, 25-Sep-2023 10:11:34 CEST
   Restart Time: Monday, 25-Sep-2023 10:06:53 CEST
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 minutes 40 seconds
   Server load: 0.06 0.33 0.19
   Total accesses: 626 - Total Traffic: 578 kB - Total Duration: 3758
   CPU Usage: u.31 s.34 cu0 cs0 - .232% CPU load
   2.24 requests/sec - 2113 B/second - 945 B/request - 6.00319 ms/request
   1 requests currently being processed, 7 idle workers

______W_........................................................
................................................................
......................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process
    Dont worry, I sleep at night :) Thanks for asking.
     
    pecka33, Sep 25, 2023
    #31
  12. pecka33

    pecka33 Member

    Now i get after reboot
    Code:
    root@samantos:~# apache2ctl status

Looking up localhost
Making HTTP connection to localhost
Alert!: Unable to connect to remote host.

lynx: Can't access startfile http://localhost/server-status
'www-browser -dump http://localhost:80/server-status' failed.
Maybe you need to install a package providing www-browser or you
need to adjust the APACHE_LYNX variable in /etc/apache2/envvars
    I tried to install lynx, but is installed.
     
    pecka33, Sep 25, 2023
    #32
  13. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Looks like the system is getting more messed up.
     
    Taleman, Sep 25, 2023
    #33
  14. pecka33

    pecka33 Member

    Thank you. Do you have any idea please what should i do? Thank you.
     
    pecka33, Sep 25, 2023
    #34
  15. pecka33

    pecka33 Member

    Now i did some changes and all domains with https write ERR_SSL_PROTOCOL_ERROR, but ispconfig still does not work, looks like port 8080 is not working.
     
    pecka33, Sep 25, 2023
    #35
  16. pecka33

    pecka33 Member

    At all, maybe will be better first solved problem with port 8080. After that i can go probably to ispconfig via browser, but not sure where i should looking for errors, can not see something about this.

    Thank you.
     
    pecka33, Sep 25, 2023
    #36
  17. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Apache2ctl test command is "apache2ctl -t" and from there you should know what is troubling your apache2 web server. Not that I am using apache2 anyway, as I am an nginx user.
     
    ahrasis, Sep 25, 2023
    #37
  18. pecka33

    pecka33 Member

    And command
    apache2ctl status
    shows
    Code:
    'www-browser -dump http://localhost:80/server-status' failed.
Maybe you need to install a package providing www-browser or you
need to adjust the APACHE_LYNX variable in /etc/apache2/envvars
     
    pecka33, Sep 25, 2023
    #38
  19. pecka33

    pecka33 Member

    I tried to command www-browser -dump http://localhost and www-browser -dump http://localhost:8080 and get
    Code:
    :~# www-browser -dump http://localhost:80
Connection refused
    looks like that port 80 does not work, but not sure what should i check.
     
    pecka33, Sep 25, 2023
    #39
  20. pecka33

    pecka33 Member

    In apache log
    Code:
    AH01232: suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
     
    pecka33, Sep 25, 2023
    #40
Page 2 of 3

Share This Page