[tools] update.script

Do you like use update.script ?

  • yes, all time

    Votes: 221 69.1%
  • no, some time

    Votes: 44 13.8%
  • some time

    Votes: 55 17.2%

  • Total voters
    320
Hi Wael,

I notice that in the first page you put SquirrelMail 1.4.15 as the latest install version, yet the script installs 1.4.13

Thanks

JCA
 
Hi,

I've installed mod_sec. 2.5.4 and the rules. After installing it i can't access a a account with http://ip/~user/domain.ext anymore.

[edit]

Already found the problem:

(modsecurity_crs_21_protocol_anomalies.conf)

# Check that the host header is not an IP address
#
#SecRule REQUEST_HEADERS:Host "^[\d\.]+$" "deny,log,auditlog,status:400,msg:'Host header is a numeric IP address',
#severity:'2',id:'960017',tag:'PROTOCOL_VIOLATION/IP_HOST'"
 
Last edited:
I can't rebuild PHP with IMAP on CentOS 5.1 x64:

/usr/bin/ld: /usr/local/imap-2004c1/lib/libc-client.a(osdep.o): relocation R_X86_64_32 against `ssl_server_input_wait' can not be used when making a shared object; recompile with -fPIC
/usr/local/imap-2004c1/lib/libc-client.a: could not read symbols: Bad value
collect2: ld returned 1 exit status
make: *** [libphp5.la] Error 1

*** The make has failed, do you want to try to make again? (y,n): n

I guess you should include this mod Wael:

http://www.directadmin.com/forum/showthread.php?t=18341

So I can use your kick ass script instead of recompiling imap myself ;)
 
nice script!

include more of this please.

mailgraph, mailscanner, mailscanner mrtg, awstats and alot! NICE GOOD JOB!
 
CLAMAV

error :( please help.


100%[=======================================>] 3,680 13.4K/s in 0.3s

16:12:46 (13.4 KB/s) - `freshclam2' saved [3680/3680]

./update.script: line 951: ldconfig: command not found
./update.script: line 951: /usr/local/sbin/clamd: No such file or directory
usage /usr/local/bin/freshclam start|stop|restart
clamd: no process killed
freshclam: no process killed
usage /usr/local/bin/freshclam start|stop|restart
./update.script: line 951: /usr/local/sbin/clamd: No such file or directory
./update.script: line 960: ldconfig: command not found
ClamAV auto start when server reboot
clamd: no process killed
freshclam: no process killed
usage /usr/local/bin/freshclam start|stop|restart
./update.script: line 960: /usr/local/sbin/clamd: No such file or directory
 
i get this error. i have created /tmp/clamd folder. and i have chmod 777 it. someone pls help. i am not able to send mails.

2008-07-08 16:25:09 1KG8VY-0005pj-PC malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
2008-07-08 16:25:09 1KG8VY-0005pj-PC H=([195.131.225.100]) [195.131.225.100] F=<[email protected]> temporarily rejected after DATA
2008-07-08 16:25:10 1KG8VZ-0005pk-Rk malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
2008-07-08 16:25:10 1KG8VZ-0005pk-Rk H=101.60.73-86.rev.gaoland.net [86.73.60.101] F=<[email protected]> temporarily rejected after DATA
2008-07-08 16:25:28 1KG8Vr-0005pp-1t malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
2008-07-08 16:25:28 1KG8Vr-0005pp-1t H=host137-23-dynamic.13-79-r.retail.telecomitalia.it [79.13.23.137] F=<[email protected]> temporarily rejected after DATA
2008-07-08 16:25:34 1KG8Vx-0005px-Cn malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
2008-07-08 16:25:34 1KG8Vx-0005px-Cn H=85-18-66-22.ip.fastwebnet.it [85.18.66.22] F=<[email protected]> temporarily rejected after DATA
2008-07-08 16:25:44 1KG8W7-0005q2-Ml malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
2008-07-08 16:25:44 1KG8W7-0005q2-Ml H=(40F0D1EEA6A74CC) [58.40.119.171] F=<[email protected]> temporarily rejected after DATA
2008-07-08 16:25:45 1KG8W8-0005q3-3C malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
2008-07-08 16:25:45 1KG8W8-0005q3-3C H=ppp-124-121-242-213.revip2.asianet.co.th [124.121.242.213] F=<[email protected]> temporarily rejected after DATA
2008-07-08 16:25:55 1KG8WI-0005qZ-QL malware acl condition: clamd: unable to connect to UNIX socket /tmp/clamd (Connection refused)
 
MODsecurity 2.5.5 Rules (update 22/7/2008)
update script will install new rules, and old rules you need to delete or move them to other folder.
new file modsecurity-rules-selected-by-web4host.net.conf

Wael
 
Hi Wael (@how@), I wanted to update OpenSSL and OpenSSH, so I did:

./update.script OPENSSL
./update.script OPENSSH

Both of these completed successfully. I am running CentOS 4.x 64 bit.

After these, I wanted to use smtalk's custombuild to rebuild ProFTPD 1.3.1, PHP 4.4.8 and Apache 2.2.9. I have been using custombuild before for those three packages, so I tried to use it again (rather than update.script).

I tried ./build proftpd but I got this error (the build completed, but there was an error when restarting):

Code:
cd include/ && make install
make[1]: Entering directory `/usr/local/directadmin/custombuild/proftpd-1.3.1/include'
make[1]: Leaving directory `/usr/local/directadmin/custombuild/proftpd-1.3.1/include'
test -z """" || (cd locale/ && make install)
Done proftpd.
Restarting ProFTPd.
Shutting down proftpd:                                     [  OK  ]
Starting proftpd:  - mod_tls/2.1.2: compiled using OpenSSL version 'OpenSSL 0.9.8h 28 May 2008' headers, but linked to OpenSSL version 'OpenSSL 0.9.7a Feb 19 2003' library
 - Fatal: unable to load module 'mod_tls.c': Operation not permitted
                                                           [FAILED]

I found this discussion on another site, but I'm not sure if it will work to fix the problem and I don't know how to make the changes to custombuild:

openssl upgrade breaks proftpd
http://bugs.proftpd.org/attachment.cgi?id=2710&action=edit


Even after that error, I decided to continue the updates. So I tried the php fix, then ./build php n. This build stopped with an error:

Code:
Zend/zend_execute_API.lo Zend/zend_highlight.lo Zend/zend_llist.lo Zend/zend_opcode.lo Zend/zend_operators.lo Zend/zend_ptr_stack.lo Zend/zend_stack.lo Zend/zend_variables.lo Zend/zend.lo Zend/zend_API.lo Zend/zend_extensions.lo Zend/zend_hash.lo Zend/zend_list.lo Zend/zend_indent.lo Zend/zend_builtin_functions.lo Zend/zend_sprintf.lo Zend/zend_ini.lo Zend/zend_qsort.lo Zend/zend_multibyte.lo Zend/zend_strtod.lo Zend/zend_execute.lo sapi/cli/php_cli.lo sapi/cli/getopt.lo main/internal_functions_cli.lo -lcrypt -lcrypt -lmysqlclient -lmhash -lmcrypt -lltdl -liconv -lfreetype -lpng -lz -ljpeg -lcurl -lz -lssl -lcrypto -lresolv -lm -ldl -lnsl -lcurl -lcrypt -lcrypt  -o sapi/cli/php
ext/openssl/openssl.lo(.text+0x5c31): In function `zif_openssl_seal':
/usr/local/directadmin/custombuild/php-4.4.8/ext/openssl/openssl.c:2885: undefined reference to `EVP_CIPHER_CTX_block_size'
collect2: ld returned 1 exit status
make: *** [sapi/cli/php] Error 1

Because of these errors, I did not try to build Apache, so it may be unable to work with the new Openssl.

Any suggestions for me? Can custombuild for ProFTPD, PHP and Apache2 work with Openssl 0.9.8h and Openssh 5.1p1? If not, how can I revert to the old Openssl 0.9.7a and old Openssh?


I have also posted this question in my thread about custombuild here:

http://www.directadmin.com/forum/showthread.php?p=136424#post136424

Thank you.
 
Last edited:
Back
Top