#1  
Old 13th March 2010, 20:35
korbynn korbynn is offline
Member
 
Join Date: May 2009
Posts: 81
Thanks: 2
Thanked 4 Times in 4 Posts
Angry port 8081

Did ispconfig add an apps and php-fcgi-scripts directorys and add a virtual host to 8081?
When I did an update with ispconfig to 3.2 these appeared about the same time?
If ispconfig did add these, what are they?
Reply With Quote
Sponsored Links
  #2  
Old 14th March 2010, 06:19
korbynn korbynn is offline
Member
 
Join Date: May 2009
Posts: 81
Thanks: 2
Thanked 4 Times in 4 Posts
Default

no response, killing the port.
Reply With Quote
  #3  
Old 14th March 2010, 18:57
Ben Ben is offline
Moderator
 
Join Date: Jul 2006
Posts: 1,029
Thanks: 7
Thanked 62 Times in 56 Posts
Default

what does "killing the port" mean?

what does netstat -tap
tell you, which process owns this port?
Reply With Quote
  #4  
Old 15th March 2010, 14:38
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,170
Thanks: 829
Thanked 5,412 Times in 4,255 Posts
Default

ISPConfig is not killing a port, it is using a port. Please see here:

http://www.howtoforge.com/forums/sho...highlight=8081
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 20th March 2010, 01:12
korbynn korbynn is offline
Member
 
Join Date: May 2009
Posts: 81
Thanks: 2
Thanked 4 Times in 4 Posts
Default

To further this discussion:

It appears that someone with knowledge of ISPConfig 3 had hacked into my server.

They created an apps.vhost on port 8081.
Directory /var/www/apps contained:

drwx------ 2 ispapps ispapps 4096 Mar 13 11:32 .
drwxr-xr-x 12 root root 4096 Mar 13 09:54 ..
-rw-r--r-- 1 ispapps ispapps 33 Mar 11 22:08 .bash_logout
-rw-r--r-- 1 ispapps ispapps 176 Mar 11 22:08 .bash_profile
-rw-r--r-- 1 ispapps ispapps 124 Mar 11 22:08 .bashrc


and a directory /var/www/php-fcgi-scripts contained:

drwxr-xr-x 4 root root 4096 Mar 11 22:08 .
drwxr-xr-x 12 root root 4096 Mar 13 09:54 ..
drwxr-xr-x 2 ispapps ispapps 4096 Mar 13 11:37 apps
drwxr-xr-x 2 ispconfig ispconfig 4096 Mar 13 11:37 ispconfig

Each of these directories contained:

.php-fcgi-starter

which the contents were:

#!/bin/sh
PHPRC=/etc/
export PHPRC
export PHP_FCGI_MAX_REQUESTS=5000
export PHP_FCGI_CHILDREN=8
exec /usr/lib/cgi-bin/php -d magic_quotes_gpc=off[

This somehow connected to a virtual machine hidden in one of my websites.

I 'rm -fR' all that was not supposed to be there and rebooted the server. Now the server runs like it is supposed to. Fast at 10Mbps up and down.

I have dumped using mod_php and am using suphp.

Maybe the proper word is terminated not killed.
Reply With Quote
The Following User Says Thank You to korbynn For This Useful Post:
delgado2061 (1st April 2011)
  #6  
Old 20th March 2010, 08:43
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,170
Thanks: 829
Thanked 5,412 Times in 4,255 Posts
 
Default

Thats the default ispconfig apps vhost which is part of ispconfig, to delete it was a very bad idea as you now messed up our setup. If you would have read the thread that I posted above, you should have seen that as it contained the instructions on how to change the port in case that its in use on your server already.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
New subdomains not added to Vhosts_ispconfig.conf? kuckus General 41 1st January 2010 09:41
squid port 443 problem. abid HOWTO-Related Questions 1 26th March 2009 17:08
Mail Question: installed smf forum on centos perfect server setup with ispconfig happz Installation/Configuration 7 22nd August 2008 13:15
Getting e-mail working hansoffate Installation/Configuration 29 13th August 2008 16:33
How to install BFD (Brute Force Detection) domino Tips/Tricks/Mods 9 31st March 2006 22:40


All times are GMT +2. The time now is 12:51.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.