Recent content by TimReeves

Sadly, I've already had to post several threads on this topic in the last few years - the way Plesk authenticates drwebd seems to be really fragile and ever again causes problems. Would be great if an alternative, robust solution can be implemented. DrWebd was running normally on two servers and...

I didn't get round to contacting support yet - but today, due to problems with drwebd on two other servers, I noticed a new log line when trying to start drwebd on my Debian 12 server: Mar 13 11:58:45 mail.reeves.one drwebd[2870062]: Plesk authorization failed: malformed response (no...

Hello @Sebahat.hadzhi , thanks for your reply. I've again checked my configuration, tried removing the /etc/sw-cp-server/conf.d/plesk-drweb-local.conf from an earlier fix suggestion, deactivated bind9 (which for strange reasons was needed during the initial config of Plesk, but now seems not to...

Hi all, I still can't get it running )-: Thanks to @Sebahat.hadzhi for adding debian to the article on installing drweb from Plesk repo. I've double-checked everything. The only difference I found to servers where it does work (Debian 11) is that in /etc/sw-cp-server/conf.d/ssl.conf there are...

Hi @Sebahat.hadzhi thanks for your reply. It would be helpful if your article also contained the way to check which repository was used for apt (not just yum); this looks like this: # apt-cache search drweb # apt-cache policy drweb-daemon > It's installed from Index of /DRWEB_6.0.2.9...

During routine auto-maintenance last night, drwebd could not be restarted, on three servers: Debian 10, 11 and 12. I'm aware of these threads, having had this sort of trouble before...

Hey @Kaspar , thanks so much! I have implemented the jail and one IP is now banned by the new jail. Thanks also for your explanation - yes, it's debatable how necessary the jail is, but I just have the gut feeling that whoever is attacking MY Plesk should get stomped on - hard. Which is why I...

Username: TITLE Fail2Ban Jail needed for /var/log/sw-cp-server/error_log PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE Plesk Web Admin, Plesk Obsidian 18.0.66 Update #2, Debian 12.9 PROBLEM DESCRIPTION While checking if all logrotate actions are being performed adequately, I...

@JVG Many many thanks for this tip! I'm seldom logged on to a console (my automated scripts tell me if anything needs doing, and an external Zabbix monitoring). So I chose the hammer method: 1. Comment out the line in syslog-ng.conf: log { source(s_src); filter(f_crit); destination(d_console)...

1 - LogFileName = syslog 2 - SyslogFacility = Daemon OK, there are two sections in /etc/drweb, [Daemon] and [Updater], and both have exactly those entries. On a server with Debian 11 there is also "OutputMode = Terminal", but I never saw any console output, so I agree that it seems that the...

I think I've found the root problem: https://serverfault.com/questions/1148725/where-is-some-os-logs-in-debian-12 "In Debian 12, the traditional syslog system has been replaced with systemd-journald. This means that the old log files like syslog, messages, auth.log are no longer used. Instead...

I just checked the same file at a Debian 11 server with Plesk (just updated to) 18.0.66, the logging section in drweb_handler.conf is identical, the file is unchanged since Apr 18 2023 (but no problem there).

Hi trialotto, nice to hear from you again after yome years! See above - I did just try what you suggested, but to no avail. I've now looked at drweb_handler.conf which contains this section: I suspect Level = Quiet might solve things; but I don't understand what "SyslogFacility = Mail" actually...

After writing I found the thread DRWeb logging to root console and I edited /etc/drweb/drweb32.ini to OutputMode = Quiet and erstarted DrWeb. This has not solved the problem )-:

I've just installed a high-end VPS rented from Strato (Germany), using their "Debian 12 + Plesk" image. It's the latest Plesk 18.0.66. The image had two problems of note: BIND was not selected as a Plesk component, and I didn't add it manually - never needed it before. Turns out, without BIND...