Blog Posts

You can now purchase licenses for WHMCS, the most preferred hosting automation system software by web hosting companies, through Netinternet. If you have an existing license, you can re-purchase it through Netinternet for accounting purposes while also using the WHMCS license at more economical prices. WHMCS licenses are offered for sale as INTERNAL on Netinternet, meaning only existing Netinternet customers can purchase WHMCS licenses. Here are our WHMCS license prices:

WHMCS Hosting Automation System (With Branding)

WHMCS Hosting Automation System (Without Branding)

The branded/unbranded license distinction refers to whether “Copyright © WHMCompleteSolution. All Rights Reserved.” appears at the bottom of the software pages on the user side. For a demo of the WHMCS hosting automation system: http://www.whmcs.com/demo/

To purchase the WHMCS hosting automation system software, log in to your customer panel at www.netinternet.com.tr, go to the New Order section, then Licenses and Other Licenses to place an order.

The bash vulnerability announced yesterday affects all versions between 3.0 and 4.2.x. It allows remote code execution when bash can be accessed over the network without authentication. You must update bash to close the vulnerability.

First, run the following command on your running system:

env x=‘() { :;}; echo vulnerable’ bash -c “echo this is a test”

If the output is as follows, the mentioned vulnerability exists on your server:

vulnerable
this is a test

To update, simply run:

yum update bash -y

If you have successfully applied the patch, run the first command again:

env x=‘() { :;}; echo vulnerable’ bash -c “echo this is a test”

The output should be:

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for ‘x’
this is a test

If you get the above output, you have no need to worry — the vulnerability has been patched.

Softaculous is a cPanel plugin that allows you to easily install many ready-made scripts. It includes approximately 200 free PHP scripts, such as WordPress, Joomla, phpBB, and PrestaShop.

Before starting the installation, you need to obtain a license for your server’s main IP address. You can place an order from the License Rental page on our website.

Before starting the installation, go to Tweak Settings in the WHM panel and check the ioncube checkbox under the cPanel PHP loader section, then save.

You need to connect via SSH for installation.

wget -N http://files.softaculous.com/install.sh

chmod 755 install.sh

./install.sh

Enter these commands via SSH. Installation takes approximately 20 minutes.

Afterwards, you will see the Softaculous - Instant Installs plugin in the left menu of WHM.

After installation, there are a few minor settings. Go to the Softaculous - Instant Installs menu and click Settings.

Choose Language - Turkish
Choose Protocol - http://www
Don’t Prefill Directory Name - Check the checkbox

Set these and save.

In this section, Postfix and Spamassassin settings and customizations will be made to prevent outbound spam mails from going out, along with Policyd password protection.

Adding Password Protection to the Interface with Htaccess

1. Since the application we installed has no password protection, anyone can add or remove rules from http://IP/webui/. Let’s add Apache-level password protection.



2. nano /etc/apache2/sites-available/000-default.conf




3. <VirtualHost :80>
   
           DocumentRoot /var/www/html
   
            <Directory /var/www/html>
   
               AuthType Basic
   
               AuthName “Please login”
   
               AuthUserFile /var/www/.htpasswd
   
               Require valid-user
   
           </Directory>
   
   </VirtualHost>



4. Generate a password hash from http://www.htaccesstools.com/htpasswd-generator/ and paste it into:

   nano /var/www/.htpasswd




5. service apache2 restart

nano /etc/postfix/main.cf

header_checks = regexp:/etc/postfix/header_checks

nano /etc/postfix/header_checks

^X-Spam-Flag:.YES DISCARD spam

Removing Relay Server Headers

nano /etc/postfix/header_checks

/^Received:/ IGNORE

Removing Spamassassin Traces

nano /etc/postfix/header_checks

^X-Spam-Checker-Version:* IGNORE

Writing Policyd Rules

• Policyd stores rules in databases like MySQL and allows you to write and apply rules from there.
• https://wiki.zimbra.com/wiki/Postfix_Policyd

References

• https://wiki.apache.org/spamassassin/DeletingAllMailsMarkedSpam

SpamCop Blocking List

To be removed from this list, visit: http://www.spamcop.net/bl.shtml and enter your IP address in the marked field. The process will be completed on the next screen.

Barracuda Blocking List

Visit: http://barracudacentral.org/rbl/removal-request and fill in the required information (IP address, email, etc.). In the Reason for Removal field, write your removal request in English, e.g.: “The spam issue on this IP address has been resolved. I request removal of this IP address from the list.” Then click Submit request.

SORBS SPAM Blocking List

Unfortunately, you need to register to be removed from this list. After registration, you will receive query screens related to your IP address. Depending on the company’s discretion, your IP address may be removed from the list in 2 to 6 weeks after these queries.

https://www.secure.sorbs.net/scgi-bin/login

IVMSIP24 Blocking List

Visit: http://dnsbl.invaluement.com/lookup/, enter your listed IP address and complete the security verification. On the next screen, enter your email address. You will receive a confirmation screen and follow-up emails with further steps if needed.

SPAMHAUS ZEN Blocking List

Query your IP address at: http://www.spamhaus.org/lookup/. Under the Removal Procedure heading, send an email to the SBL Team to request removal.

IMP SPAM Blocking List

Enter your IP address in the IP Number field at: http://antispam.imp.ch/spamikaze/remove.php. That’s all — the company will remove your IP address once spam output stops.

LASHBACK SPAM Blocking List

Visit: http://www.lashback.com/blacklist/, enter your IP address in the Delist request field and click Submit. Fill in the required information with a valid email address and click Request Delist. A confirmation email will be sent.

INPS_DE SPAM Blocking List

Visit: http://dnsbl.inps.de/index.cgi, enter your IP address and click Request removal. You will see two options: immediate removal for a fee (£10) or free removal within 1 week.

SERVICESNET SPAM Blocking List

This is a Korean-based company (korea.services.net). You can only contact them via email through the contact section at: http://www.dnsbl.info/contact.php. They will respond to your email.

UCEPROTECTL2 SPAM Blocking List

Query your IP at: http://www.uceprotect.net/en/rblcheck.php. The table at the bottom shows Level 2 and Level 3 escalation limits. When the number next to your IP exceeds 100, you are listed and cannot send mail. This company requests payment for removal. The most sensible approach is to find the spamming account on your server and stop the spam output — once stopped, the count will drop below 100.

In the spam quarantine section, you can view all emails that have been indefinitely blocked by filters. If your incoming or outgoing emails are caught by the system filters, they will be listed in this section. It is recommended to monitor this list at regular intervals to keep track of your quarantined emails.

If your server or hosting service has been successfully set up but you cannot send emails to certain addresses, or your emails are going to the spam folder (e.g. Hotmail, Gmail, Yahoo), the reason may be an SPF record issue.

SPF record is a service initiated by Microsoft to block spam. It verifies that your account is a legitimate account.

Important Note: If you continue to have issues sending mail to high-traffic providers like Hotmail, Gmail, or Yahoo after setting up an SPF record, it may be due to these companies’ internal procedures of blocking IP addresses. In such cases, please contact our company via support ticket.

SPF RECORD CREATION

If no changes have been made to your individual or reseller accounts (backup or DNS operations), your SPF record is already automatically created.

You can query your SPF record at: https://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/default.aspx

To create an SPF record, log in to cPanel for the domain you want to configure. Click on Advanced DNS Zone Editor under Domains.

Name: domain.com. (a “.” must be added at the end of the domain)
TTL: 14400
Type: TXT
TXT Data: “v=spf1 ip4:192.168.2.1 a mx ptr include:domain.com ~all”

Enter the IP address and domain name in the highlighted fields. Click Add record to complete.

Another method is through the Edit DNS Zone Editor in WHM panel. Go to the relevant account’s DNS zone editor, and add a new record at the bottom of the page as shown.

If you have SSH access to your cPanel server, you can take backups via SSH commands just as you can through cPanel. There is no difference between the two methods. However, in rare cases, backups taken through cPanel may encounter issues if there are too many files or the account size is very large. In such cases, taking a backup via command is the most reliable method.

Backup Process

After logging into your cPanel server as root, navigate to the /home directory. Then start the backup using the cPanel account username with the following command:

cd /home

/scripts/pkgacct username

e.g.

/scripts/pkgacct netinternet

After pressing Enter, the process will begin. The duration depends on the file count and account size. After completion, you can find the backup as cpmove-username.tar.gz in the home directory.

Restore Process

Restoring a backup via SSH is just as simple. You can restore your backup and activate the account with a single command. Make sure you are in the directory containing the backup file before running the restore command.

cd /home

/scripts/restorepkg backup-file

e.g.

/scripts/restorepkg cpmove-netinternet.tar.gz

You can restore backups taken through cPanel or via command with this command, as long as the backup file has a tar.gz extension.

If you have root access on cPanel servers, you can take backups via SSH commands as well as through the control panel interface. For accounts with a very large number of files or very large account sizes, taking and restoring backups via SSH is more reliable. Errors may occur when taking or uploading large backups through the interface.

Backup Process

Log in to the server via SSH as root. Navigate to the /home directory first. Then start the backup with the following command using the cPanel account username:

cd /home

/scripts/pkgacct username

Example:

/scripts/pkgacct netinternet

After pressing Enter, the process will begin on the server. Duration varies depending on file count and account size. After completion, you can find the backup in the home directory as cpmove-username.tar.gz.

Restore Process

Restoring a backup via SSH command is just as simple as taking one. You can restore your backup and activate the account with a single command. Make sure you are in the directory containing the backup file before running the restore command.

cd /home

/scripts/restorepkg backup-file

Example:

/scripts/restorepkg cpmove-netinternet.tar.gz