cPanel

New MailScanner Front-End (MSFE) v4.23

Changes:

  • Modified cPanel Msfe.pm to use the new Cpanel::SafeFile module otherwise it fails within cPanel with:[a fatal error or timeout occurred while processing this directive]

cPanel – Perl on VPS Servers

It appears that many VPS servers overnight have installed the OS vendor version of perl, e.g. v5.8.5. This has meant that most of the perl modules that cPanel itself along with csf, MailScanner and other perl scripts use are missing. This in turn means that many perl based scripts (e.g. MailScanner, csf, cPanel itself) will have stopped functioning.To resolve this issue, either run:/scripts/checkperlmodulesOr, better, upgrade back to perl v5.8.8 using the distribution on the cPanel site:http://layer1.cpanel.net/You might also get away with simply going to /usr/bin/ and copying the perl v5.8.8 binary over the live perl binary.Whichever method you use, with MailScanner at least, you’ll have to update MailScanner either from our install script, or by selecting the Force MailScanner Update button for MailScanner in the WHM UI.It would then probably be a good idea to run:/scripts/upcp -forceHow this happened is odd as /etc/yum.conf on cPanel includes perl* in the ignore list.

New MailScanner Script v2.66

Changes:

  • New version of MailScanner v4.69.9. Changelog at http://www.mailscanner.info/ChangeLog
  • Added check for /var/spool/exim being mounted as a separate fileystem that some silly Server Providers are configuring as temporary virtual mountpoints

New csf v3.35

Changes:

  • Changes to WHM UI script for cPanel v11
  • Removed cPanel v10 backported WHM UI settings, i.e. v10 no longer supported
  • Added # of temp blocks to WHM UI “Temporary IP Bans” on main page
  • Modified Server Report check for register_globals in cPanel’s php.ini to use the new cPanel WHM setting
  • Added Server Report check for passwords in WHM email setting
  • Added Server Report check for WHM root/reseller login to users cPanel
  • Modified Server Report nobody cron check to only fail on non-zero cron file
  • Modified Server Report check for Fedora now that Fedora 7 is EOL (2008-06-13)
  • Added new option DYNDNS_IGNORE to ignore DYNDNS entries when lfd blocking

New ClamAV v0.93.1

Changes:

  • This version improves handling of PDF, CAB, RTF, OLE2 and HTML files and includes various bugfixes for 0.93 issues

If you use MSFE you can upgrade using the UI.

New csf v3.31

Changes:

  • Modified -denyrm to abort if left blank instead of clearing all blocks
  • Added lfd check for existing temporary block to avoid duplicates
  • Fixed regex handling for courier-imap POP and IMAP login failures
  • Added –full-time to the ls command for LF_DIRWATCH_FILE. If you use this option, LF_DIRWATCH_FILE will likely trigger due to the changed output the first time you restart lfd after upgrading
  • Fixed typo in Suhosin description in the Server Check Report
  • Added Referrer Security to the Server Check Report
  • Added register_globals check in cPanel php.ini to Server Check Report

New MailScanner Front-End (MSFE) v4.22

Changes:

  • Modified MailWatch to better cope with a remote MySQL database
  • Removed Dynaloader from Msfe.pm as cPanel no longer provide it in their perl distribution

cPanel breaks your MTA with 11.23.0-EDGE_24083 and 11.23.0-CURRENT_24083

If you’re running either of the listed builds above, then you could have a broken MTA.For some bizarre reason, cPanel decided to add a new feature that breaks the standard MTA configuration of sending out all email on a servers main IP address. Their change is to send it out on the IP address of the sending domain. This means that unless all your rDNS PTR records for all of your servers IP addresses are set to your hostname a large number of receiving MTA’s on the internet will either treat incoming email as spam or simply bounce it.In their wisdom, cPanel have made this massive MTA change as the new default in EDGE and CURRENT, changing the status quo without your knowledge or indeed control. You cannot currently disable this change and revert back to the way the MTA should work.In the short term, you can delete /etc/mailips and add a line to /scripts/postupcp to remove that file, however this still leaves a window between upcp running /scripts/updateuserdomains and /scripts/postupcp running when your outgoing email could be broken.Apparently this change was made to benefit the use of SPF records. Since that technology has proven to provide little or no benefit, and there are no requirements whatsoever in the MTA RFC’s to use SPF, it seems bizarre that cPanel has taken this route as their default configuration.Note: MTA ~ SMTP Server

Problems with LWP and access to https URL's

If you’re using perl scripts on your server that use LWP and suddenly find them failing with connections to https resources with the following type error:

500 read failed: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

then you’ve probably got LWP v5.811 installed which breaks SSL connections! The author fixed the problem he created after about two days with v5.812 but the damage was done on many servers. cPanel have put a hold back on cpan module updates for LWP to v5.810 but if your servers already upgraded LWP then you’ll need to either upgrade it manually from the cpan source to v5.812 or downgrade to v5.810.Downgrading LWP:

wget http://search.cpan.org/CPAN/authors/id/G/GA/GAAS/libwww-perl-5.810.tar.gztar -xzf libwww-perl-5.810.tar.gzcd libwww-perl-5.810perl Makefile.PLmake(take the default options unless you want to additional binaries installed)make install