Hi Alden,

Thank you for the reply. I am the administrator and only user, which in my case I know enough to be dangerous. I think there are larger issues that was and is happening.
For example, in the past I have had permissions on directories for flexshares. I am constantly under attack which I really don't know why because, I just run a simple website that I use as a sandbox and to track my spinner rides. Also, I use plex media server.

Anyway, I ended up just re-installing clearos on the box with a fresh install.

What I do find concerning is that I got this after turning off the shell server ssh

May 2 03:08:01 server runuser: pam_unix(runuser-l:session): session opened for user cyrus by (uid=0)
May 2 03:08:02 server runuser: pam_unix(runuser-l:session): session closed for user cyrus


May 4 03:22:01 server runuser: pam_unix(runuser-l:session): session opened for user cyrus by (uid=0)
May 4 03:22:02 server runuser: pam_unix(runuser-l:session): session closed for user cyrus

REF: https://man7.org/linux/man-pages/man1/runuser.1.html

So basically, I learned I need to be more diligent in my port forwarding and what servers are ran. I only turn on ssh when I need to use it otherwise it is off.

I don't know who cyrus is or why they are attempting to break in. There is only two logins that are really allowed.

They may have gotten in and altered my ftstab (I believe this is the correct file name) file. It is where my bind mounts are located.

Maybe someone will read this and recognize the same issues.

Also I have seen this,

May 1 11:55:27 localhost login: pam_unix(login:session): session opened for user clearconsole by LOGIN(uid=0)
May 1 11:55:27 localhost login: LOGIN ON tty1 BY clearconsole

That is within the host, I believe and may be normal.

If anyone has any other thoughts, I would appreciate them.

Thank you all!

FTP Directory issue After WAN/LAN ROUTER UPDATE

Hello,
I recently had to upgrade my wired Router after the older model was failing. I have Forward the ports and I can gain access however when I do I see the followingl

Remote Site: /

.bash_logout
.bash_profile
.bashrc

Now I know enough that is not right. Also for the directory setting I see /mnt. I did attempt to change the directory setting to /var/flexshares/shares/mydirectory

I get this:
Status: Retrieving directory listing of "/var/flexshares/shares"...
Status: Directory listing of "/" successful

I am using Filezilla and the New Router is TP-Link ER605.
I would appreciate if someone was able to point me into the correct direction. I did forward the correct ports on the Router and Server. It all worked fine before the upgrade.

Any help would be greatly appreciated.

Thank you!
Bill

When I do a yum update I get this
Error: Package: 1:app-php-engines-core-1.2.0-1.v7.noarch (clearos-contribs)
Requires: rh-php72-php-process

Do I just need to update php first?

How To htaccess file for sub domain to redirect to https

I first have an htaccess file working for the main domain. that file is in its directory.

my sub domain is setup this way blog.example.com

I created its own htaccess file

I have attempted several solutions to no avail. the last one being this

RewriteEngine On
RewriteCond %{HTTP_HOST} ^blog\.example\.com [NC]
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://blog.example.com/$1 [R,L]

The above fails. I would greatly appreciate any thoughts on a solution for the redirect.

Thank you!

FTP access Failing Plus directory permission and ownership changing overnight.

Hello;
I looked at this post Title


I am having some issues and not quite sure how folder permissions and read writes attributes are being altered
on the system. The changes are being done over night. Is an update doing this?

1 . var/www/html being changed to drwxrwx--- 18 ftp ftp 4096 Feb 24 19:37 html
this causes a forbidden when I attempt to load the website. via a browser.
Error: You don't have permission to access / on this server.

a) is ftp the correct owner and group? ftp:ftp
or
b) should it be root:root?

2) FTP issues I am now unable to ftp in to flexshares and I have changed owner and group on on
ftp and subs. below is current

drwxr-xr-x 2 root root 6 Jun 1 2016 pub
d-wx-wx--x 2 ftp ftp 6 Jun 1 2016 uploads

3) flexshares
drwxr-xr-x 4 ftp ftp 45 Dec 15 17:59 shares

under shares
drwxrwxr-x 9 ftp ftp 132 Feb 24 19:37 myserver
drwxrwxr-x 18 ftp ftp 4096 Feb 24 19:37 example.com - not letting out my wesite.

I had changed the shares and subs chown from:

2000:6000 to ftp:ftp Not sure this is correct.

filezilla I am getting this;
220 ProFTPD 1.3.5b Server (FTP) [::ffff:192.168.1.111]
331 Password required for xxxx
Command: PASS ************
Response: 530 Login incorrect.
Error: Critical error: Could not connect to server

Now through the same machine - my desktop I can ftp in for work on two separate servers. they are secure.


I did attempt to apply an external certificate for the website. It was free. site: sslforfree.com probably should have done OpenSSL. The certificate has been removed.

Still don't know how the folder and files permissions and ownership's were being changed.

Any suggestions on how to resolve these issues would be greatly appreciated. If you wan't logs to look at please be specific on which ones to grab,

Thank you!