Jump to content

wolstech

Chief Risk Officer
  • Posts

    18,421
  • Joined

  • Last visited

  • Days Won

    713

Posts posted by wolstech

  1. Where are you seeing the dovecot error? Users don't have the ability to restart that, so kind of a weird one for you to see. As for DKIM/SPF:

    DKIM, SPF, and DMARC have been set up for the domain almhdy.sd. We recommend sending a real email (not just the word "test" or a blank email) to https://www.mail-tester.com/ to make sure that everything is set up correctly. If you get less than a 10/10 score please post a link to the full report so we can help you fix any other issues that there may be.
     

  2. This sort of traffic is basically normal for any website that's been around for more than a few weeks. It's almost entirely malicious bots that are searching for things like a vulnerable Wordpress installation to break into or configuration files with database credentials so they can steal your data. 

    The nginx errors are usually because the server is overloaded. That's pretty normal for Johnny when server load is up. Apache restarts can also cause these. They're less of an issue on Tommy and nonexistent on Morty.

    We generally just advise users to block unwanted traffic like this in .htaccess if they are causing load issues, though in your case you said they're hitting nonexistent files and getting 404 errors, which cause so little load that you likely won't even see it register on the load chart. We do not have an edge firewall or similar (we can't afford one due to our funding structure), though the server itself has a software firewall that we've used in severe cases to address an account under attack.

    If you're would like, you can also file an abuse report with the owners of the incoming IP addresses in question. You'll need to find the company that owns the IP (pretty easy to do by googling it), then follow whatever that company provides for an abuse complaint. I've had success reporting addresses that are based in the US and EU, but you're unlikely to receive responses from hosting companies in countries like Russia and China (if they even accept abuse reports), where this sort of activity is tolerated (if not legal).

    • Thanks 1
  3. I just did some research on this, and even ignoring the "Why?" aspect of this, the behavior of .phps (colorized source view) is apparently a function specifically provided by the mod_php module for apache. It's not a function of PHP itself. Since Plesk does not use the apache module, this isn't supported.

    Your best bet is going to be a solution like Krydos suggested: Write a PHP script that displays another script's contents. Once you have that, you  can probably be creative with .htaccess rewrite rules to make calls for .phps files redirect to that script with the requested file as a parameter to emulate the behavior.

    • Thanks 1
  4. It's just not supported.

    Plesk doesn't officially have the listings enabled by default, so we made changes to have it do that (it was the same behavior our old cPanel servers had, we were tired of support tickets to explain the 403 error that Plesk showed by default, users preferred it and often asked for them to be enabled, and it often makes abuse stand out since they wouldn't hide the listing and leave files like "script phising.zip" in their root...yes that was a real file we found). Specifically, we forced it in the Apache config. Apache doesn't always let you override that option for some reason (the Options line in general doesn't very work well on Plesk).

    The easiest way to accomplish this on our service is to just put an empty index.html in the folder...

    • Like 1
  5. Domains added. Please be sure to configure DNS for them, either by using our name servers (ns1.heliohost.org and ns2.heliohost.org) or by setting A and AAAA records on external DNS pointed to the IPs shown in Plesk. Domains can take up to 2 hours to start working.

    Please keep in mind that there is a limit of 10 domains total, you're using 9.

    Also, as a reminder, users are limited to one account between Johnny and Tommy. If you need more than 10 domains, or need a second account for any other reason, the additional accounts must be on Morty.

×
×
  • Create New...