Search results

I think you have a fundamental misunderstanding how a MitM attack works. In case of such an attack, the attacked user wants to contact the plesk server, but instead contacts the MitM server because someone managed to tweak DNS or routing or whatever. Now why would that MitM server tell the...

And that's exactly what it does. Your user authenticated as [email protected], and then tried to send as [email protected]. Which was corrected to the address the user authenticated with.

This is in the context of MitM attack. Why would a MitM require STARTTLS?

That's the same file you tried this on before (chattr follows the symlink). You are supposed to edit the resolvconf.conf file, like explained in @AYamshanov's link.

What exactly is complaining about insufficient storage? After all, if you haven't removed the old mail spool yet, you haven't gained any space on the root filesystem.

No. You are getting that message because the server detected an incoming mail as spam and lists the reasons for the classification and their respective score. Blocked RBL queries do not count towards the score (they're all listed as 0.0), so it means that mail does already get a high score from...

Where did you put that? Directly in nginx.conf, under conf.d/, under plesk.conf.d/ ..?

Not only cron; those settings are only applied to the respective fpm pool. Generally, you can use /opt/plesk/php/8.3/bin/php -i to view the effective config and the files it got loaded from.

Only in so far that you should only be root when necessary and do other tasks with an unprivileged account. However we're talking about Plesk servers where usually the only reason you need to log in at all is to do things you can't do from or repair the web interface, for which you need...

Does it get faster if you lower the MTU to 1492 or less? If yes, then MTU Path Discovery is broken.

Did you check whether you're connecting to the website by ipv4? What's your MTU? These are suspicious:

No, it isn't. You should, however, use PasswordAuthentication no or at least PermitRootLogin prohibit-password. Make sure your key works before restarting sshd.

Do you have chroot active? Might be better to use relative links ../../../httpdocs/wp-content/uploads

On debian/ubuntu I would use update-alternatives to select which php `php` points to, no idea how that works in centos, worst case you'd have to manually overwrite /usr/bin/php with a symlink to your desired php binary.

With that setup, nobody would be able to send email to [email protected] unless that account is configured at google too. The MX with the higher number will only be tried if google's server can't be reached or responds with a temporary failure code. But an account that isn't recognized...

fail2ban maybe?

Doesn't aptitude give you any options to resolve those dependencies?

I do not support spammers.

As long as the A/AAAA records for serveur001.domain.com do not point to cloudflare, that is not a problem. You can use the same certificate on different servers. You can also use different certificates as long as the issuer is not forbidden via CAA record in DNS. You can even use different...

I think I'm seeing something similar here ... this morning at 6:26, Plesk updated itself to 18.0.63mu3. Just a minute later, I got a Package Update Manager notification for 108 packages, some of them skipping several versions (e.g. "libc-bin 2.31-13+deb11u10 from Debian-Security for...