
6th August 2010, 09:37
|
|
Junior Member
|
|
Join Date: Aug 2010
Location: Prague, Czech Republic
Posts: 13
Thanks: 0
Thanked 1 Time in 1 Post
|
|
What about server side authentication problem?
Some error log from the server would be helpful.
|

6th August 2010, 11:46
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,665
Thanks: 1,896
Thanked 2,594 Times in 2,445 Posts
|
|
Code:
mh1:~# dig mx kwickbid.com
; <<>> DiG 9.3.4 <<>> mx kwickbid.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7506
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;kwickbid.com. IN MX
;; ANSWER SECTION:
kwickbid.com. 7200 IN MX 10 mail.kwickservers.com.
kwickbid.com. 60 IN MX 0 smtp.kwickbid.com.
kwickbid.com. 600 IN MX 25 guide.mx.dnspark.net.
;; Query time: 169 msec
;; SERVER: 213.133.98.98#53(213.133.98.98)
;; WHEN: Fri Aug 6 11:57:10 2010
;; MSG SIZE rcvd: 121
mh1:~#
smtp.kwickbid.com is the preferred mail server, but there's no A record for smtp.kwickbid.com:
Code:
mh1:~# dig smtp.kwickbid.com
; <<>> DiG 9.3.4 <<>> smtp.kwickbid.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13050
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;smtp.kwickbid.com. IN A
;; Query time: 167 msec
;; SERVER: 213.133.98.98#53(213.133.98.98)
;; WHEN: Fri Aug 6 11:57:20 2010
;; MSG SIZE rcvd: 35
mh1:~#
|
|
The Following User Says Thank You to falko For This Useful Post:
|
|

6th August 2010, 16:13
|
|
HowtoForge Supporter
|
|
Join Date: Nov 2005
Location: nj usa
Posts: 217
Thanks: 13
Thanked 10 Times in 9 Posts
|
|
i dont know why that was in there i remover it from dns park this is the new dig for the url
Code:
root@kwickservers:/home/kwick# dig mx kwickbid.com
; <<>> DiG 9.6.1-P2 <<>> mx kwickbid.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48548
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;kwickbid.com. IN MX
;; ANSWER SECTION:
kwickbid.com. 600 IN MX 10 mail.kwickservers.com.
kwickbid.com. 600 IN MX 25 guide.mx.dnspark.net.
;; Query time: 81 msec
;; SERVER: 68.87.64.150#53(68.87.64.150)
;; WHEN: Fri Aug 6 10:09:59 2010
;; MSG SIZE rcvd: 100
root@kwickservers:/home/kwick#
|

7th August 2010, 11:54
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,665
Thanks: 1,896
Thanked 2,594 Times in 2,445 Posts
|
|
Looks good. Does it work now?
|
|
The Following User Says Thank You to falko For This Useful Post:
|
|

7th August 2010, 19:34
|
|
HowtoForge Supporter
|
|
Join Date: Nov 2005
Location: nj usa
Posts: 217
Thanks: 13
Thanked 10 Times in 9 Posts
|
|
i have posted a ton of information in the hopes that something may jump out and make it easy for you to find my faults... i do see that rkhunter is messed up or something is off a bit .
no still can not receive emails to any account...i am lost... all domains that are pointed to the server have
10 mail.domain name of site.com
but still nothing hits the email boxes
now this is in the main user email box on server
Code:
Mail headers View all headers | View raw message
From root@kwickservers.com (root)
To root@kwickservers.com
Date 07/08/2010 06:33
Subject [rkhunter] kwickservers.com - Daily report
Message contents
Warning: The file properties have changed:
File: /usr/bin/awk
Current inode: 8026210 Stored inode: 8020904
Current file modification time: 1263717195
Stored file modification time : 1263715765
Warning: The file properties have changed:
File: /usr/bin/dpkg
Current hash: 8e820f6ffa1ba84be7c5256a8bd344a49fec7182
Stored hash : 7c5ab2420dfddf22f3794a1f2aa4b61243e44a08
Current inode: 8026384 Stored inode: 8020980
Current file modification time: 1268271700
Stored file modification time : 1253435089
Warning: The file properties have changed:
File: /usr/bin/dpkg-query
Current hash: b5a6de09d70cd24592cb59dbdd2d58e9280a7cc0
Stored hash : 19539cfbfd8621b4fae64a5f5f8ad80775acbf5d
Current inode: 8026387 Stored inode: 8020983
Current file modification time: 1268271700
Stored file modification time : 1253435089
Warning: The file properties have changed:
File: /usr/bin/ldd
Current inode: 8025213 Stored inode: 8023206
Current file modification time: 1274431413
Stored file modification time : 1262519901
Warning: The file properties have changed:
File: /usr/bin/sudo
Current hash: c41ed3f1c3a0abba36f2cfc84b7926b3375a851d
Stored hash : db452cb33718b23e8f33d0e27dc5168a25201116
Current inode: 8020847 Stored inode: 8023129
Current size: 143736 Stored size: 143656
Current file modification time: 1277762825
Stored file modification time : 1245687344
Warning: The file '/usr/bin/gawk' exists on the system, but it is not present in
the rkhunter.dat file.
Warning: The file properties have changed:
File: /sbin/ifdown
Current hash: a233b8eee20b09926816606d3c8cd85ee95d2ed0
Stored hash : 4bee75d37d635cd8eb11b4725a3bee26b9547b81
Current inode: 98306 Stored inode: 98358
Current file modification time: 1266883140
Stored file modification time : 1253662472
Warning: The file properties have changed:
File: /sbin/ifup
Current hash: a233b8eee20b09926816606d3c8cd85ee95d2ed0
Stored hash : 4bee75d37d635cd8eb11b4725a3bee26b9547b81
Current inode: 98306 Stored inode: 98358
Current file modification time: 1266883140
Stored file modification time : 1253662472
Warning: The file '/usr/sbin/inetd' exists on the system, but it is not present in
the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present
in the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not
present in the rkhunter.dat file.
Warning: Found passwordless account: web2
Warning: The SSH and rkhunter configuration options should be the same:
SSH configuration option 'PermitRootLogin': yes
Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
Warning: Hidden directory found: /dev/.udev
Warning: Hidden directory found: /dev/.initramfs
Warning: Application 'gpg', version '1.4.9', is out of date, and possibly a security
risk.
Warning: Application 'openssl', version '0.9.8g', is out of date, and possibly a
security risk.
Warning: Application 'php', version '5.2.10', is out of date, and possibly a security
risk.
Warning: Application 'sshd', version '5.1p1', is out of date, and possibly a security
risk.
One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
now this is from var/mail/root
there is a ton more but this is the last entry
Code:
Subject: [rkhunter] kwickservers.com - Daily report
To: root@kwickservers.com
Message-Id: <20100516102655.042E7CC323@mail.kwickservers.com>
Date: Sun, 16 May 2010 06:26:55 -0400 (EDT)
From: root@kwickservers.com (root)
Warning: The file properties have changed:
File: /usr/bin/awk
Current inode: 8026210 Stored inode: 8020904
Current file modification time: 1263717195
Stored file modification time : 1263715765
Warning: The file properties have changed:
File: /usr/bin/dpkg
Current hash: 8e820f6ffa1ba84be7c5256a8bd344a49fec7182
Stored hash : 7c5ab2420dfddf22f3794a1f2aa4b61243e44a08
Current inode: 8026384 Stored inode: 8020980
Current file modification time: 1268271700
Stored file modification time : 1253435089
Warning: The file properties have changed:
File: /usr/bin/dpkg-query
Current hash: b5a6de09d70cd24592cb59dbdd2d58e9280a7cc0
Stored hash : 19539cfbfd8621b4fae64a5f5f8ad80775acbf5d
Current inode: 8026387 Stored inode: 8020983
Current file modification time: 1268271700
Stored file modification time : 1253435089
Warning: The file properties have changed:
File: /usr/bin/sudo
Current hash: f6d3835fd7ad04f7c749b0e1323887fe688af14e
Stored hash : db452cb33718b23e8f33d0e27dc5168a25201116
Current inode: 8022554 Stored inode: 8023129
Current size: 143736 Stored size: 143656
Current file modification time: 1271179860
Stored file modification time : 1245687344
Warning: The file '/usr/bin/gawk' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file properties have changed:
File: /sbin/ifdown
Current hash: a233b8eee20b09926816606d3c8cd85ee95d2ed0
Stored hash : 4bee75d37d635cd8eb11b4725a3bee26b9547b81
Current inode: 98306 Stored inode: 98358
Current file modification time: 1266883140
Stored file modification time : 1253662472
Warning: The file properties have changed:
File: /sbin/ifup
Current hash: a233b8eee20b09926816606d3c8cd85ee95d2ed0
Stored hash : 4bee75d37d635cd8eb11b4725a3bee26b9547b81
Current inode: 98306 Stored inode: 98358
Current file modification time: 1266883140
Stored file modification time : 1253662472
Warning: The file '/usr/sbin/inetd' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file.
Warning: Found passwordless account: web2
Warning: The SSH and rkhunter configuration options should be the same:
SSH configuration option 'PermitRootLogin': yes
Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': no
Warning: Hidden directory found: /dev/.udev
Warning: Hidden directory found: /dev/.initramfs
Warning: Application 'gpg', version '1.4.9', is out of date, and possibly a security risk.
Warning: Application 'openssl', version '0.9.8g', is out of date, and possibly a security risk.
Warning: Application 'php', version '5.2.10', is out of date, and possibly a security risk.
Warning: Application 'sshd', version '5.1p1', is out of date, and possibly a security risk.
One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
now i just looked at the mail errors var/log/mail.err
and this is the latest out put
Code:
Aug 5 22:34:56 kwickservers postfix/smtp[9367]: fatal: valid hostname or network address required in server description: []
Aug 6 00:38:02 kwickservers postfix/sendmail[32530]: fatal: some email address@gmail.com(33): No recipient addresses found in message header
thanks for all your help
kwick
|

8th August 2010, 20:42
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,665
Thanks: 1,896
Thanked 2,594 Times in 2,445 Posts
|
|
What's in the mail log now when you send an email to an account created through ISPConfig?
|

9th August 2010, 02:13
|
|
HowtoForge Supporter
|
|
Join Date: Nov 2005
Location: nj usa
Posts: 217
Thanks: 13
Thanked 10 Times in 9 Posts
|
|
ok.. i know that i can now send emails from the accounts that are set up.. my problem now is i have to use a service to send emails out on port 2525. this service requires setting up an account with domains email account then they send a conformation email to that address for you to activate the service for said domain..
below is an email that i tried to send to one of the accounts
Code:
Sorry, we were unable to deliver your message to the following address.
<admin@kwickbid.com>:
Remote host said: 550 5.1.1 <admin@kwickbid.com>: Recipient address rejected: User unknown in virtual alias table [RCPT_TO]
--- Below this line is a copy of the message.
Received: from [76.13.12.65] by n12.bullet.mail.ac4.yahoo.com with NNFMP; 09 Aug 2010 00:05:42 -0000
Received: from [76.13.10.162] by t6.bullet.mail.ac4.yahoo.com with NNFMP; 09 Aug 2010 00:05:42 -0000
Received: from [127.0.0.1] by omp103.mail.ac4.yahoo.com with NNFMP; 09 Aug 2010 00:05:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 423769.14107.bm@omp103.mail.ac4.yahoo.com
Received: (qmail 64699 invoked by uid 60001); 9 Aug 2010 00:05:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1281312342; bh=ZcnoL39kDeLykvhWpbMajG00+rHCpU6GYVvuax+CoTs=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=jARjJDuMhDWZcqaDGmA7lxsaqtMa5WNFp+x5SDorZeHYjnGtQbwcyf+WmjWyKyQ09yliRjkrUPw2QT2kXcYYhLblJhooyy+z48U6+AY9zhERAAdidTjsRY0DJr1snuw5Taxr1rkKIJ+J2kp+0j07TyIeF7GYRxAwBTK/55gX8kc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=T62w3BXVbkTvFam/JNYXEB6+SktbL5MJyV+FCuze0lcjMV+KsVKu1iOYYZCVlqE53YfE17K06kE72bjpbwKajZn0BEXQO1O+o2/UI22LVOpKB0kJeauUocmt41+cNt1YVu0jAVSpYZL+byHdAjn9MYSz4W3WqSdxz6el3b2JTxc=;
Message-ID: <103200.64401.qm@web65514.mail.ac4.yahoo.com>
X-YMail-OSG: mCNhYi8VM1lUZ9GwUUN1lKgbWpWka3jDbn3WgH7nzxVkUO_
16zSJyq3namPZ6mvA4K3FbS6VHqr8qvpFE5TlYOXVgqQRQYYFre23so8XmJ9
fWjbG8G2ZAXJkC_jaJcKkDYWTGB629SQmfxgek2afdDd2a8tuASWF6yd8q1D
WL8tMz7Qok4LdDTBYQSeL0MbnasV76ORQmcYirwzvGR8jXvOpqNCMBsloRQg
IJ6xwz7oGCJhts6Ke5jEE1IoCLbk1Ur3J868j4051kSb1DSGcxg1S1AQF2iz
w26wp93GhYnz_OgpRI6C1BF.4Se9EcDC0EQDhjc1ehhY-
Received: from [68.44.214.20] by web65514.mail.ac4.yahoo.com via HTTP; Sun, 08 Aug 2010 17:05:41 PDT
X-Mailer: YahooMailClassic/11.3.2 YahooMailWebService/0.8.105.279950
Date: Sun, 8 Aug 2010 17:05:41 -0700 (PDT)
From: kwick <kwickcuts@yahoo.com>
Subject: test
To: admin@kwickbid.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-615811189-1281312341=:64401"
--0-615811189-1281312341=:64401
Content-Type: text/plain; charset=us-ascii
tester emailer
--0-615811189-1281312341=:64401
Content-Type: text/html; charset=us-ascii
<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">tester emailer<br></td></tr></table><br>
--0-615811189-1281312341=:64401--
|

9th August 2010, 13:48
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,665
Thanks: 1,896
Thanked 2,594 Times in 2,445 Posts
|
|
What's in the mail log?
|

9th August 2010, 14:06
|
|
HowtoForge Supporter
|
|
Join Date: Nov 2005
Location: nj usa
Posts: 217
Thanks: 13
Thanked 10 Times in 9 Posts
|
|
Code:
Aug 9 06:30:01 kwickservers pop3d: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:30:01 kwickservers pop3d: Disconnected, ip=[::ffff:127.0.0.1]
Aug 9 06:30:01 kwickservers imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:30:01 kwickservers imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
Aug 9 06:30:01 kwickservers postfix/smtpd[30939]: connect from localhost.localdomain[127.0.0.1]
Aug 9 06:30:01 kwickservers postfix/smtpd[30939]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
Aug 9 06:30:01 kwickservers postfix/smtpd[30939]: disconnect from localhost.localdomain[127.0.0.1]
Aug 9 06:35:01 kwickservers pop3d: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:35:01 kwickservers pop3d: Disconnected, ip=[::ffff:127.0.0.1]
Aug 9 06:35:01 kwickservers imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:35:01 kwickservers imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
Aug 9 06:35:01 kwickservers postfix/smtpd[30994]: connect from localhost.localdomain[127.0.0.1]
Aug 9 06:35:01 kwickservers postfix/smtpd[30994]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
Aug 9 06:35:01 kwickservers postfix/smtpd[30994]: disconnect from localhost.localdomain[127.0.0.1]
Aug 9 06:38:53 kwickservers postfix/pickup[30719]: 2C7F2CC330: uid=0 from=<root>
Aug 9 06:38:53 kwickservers postfix/cleanup[14459]: 2C7F2CC330: message-id=<20100809103853.2C7F2CC330@mail.kwickservers.com>
Aug 9 06:38:53 kwickservers postfix/qmgr[1747]: 2C7F2CC330: from=<root@kwickservers.com>, size=3968, nrcpt=1 (queue active)
Aug 9 06:38:53 kwickservers postfix/smtpd[14498]: connect from localhost.localdomain[127.0.0.1]
Aug 9 06:38:53 kwickservers postfix/smtpd[14498]: A6467CC2A0: client=localhost.localdomain[127.0.0.1]
Aug 9 06:38:53 kwickservers postfix/cleanup[14459]: A6467CC2A0: message-id=<20100809103853.2C7F2CC330@mail.kwickservers.com>
Aug 9 06:38:53 kwickservers postfix/smtpd[14498]: disconnect from localhost.localdomain[127.0.0.1]
Aug 9 06:38:53 kwickservers postfix/qmgr[1747]: A6467CC2A0: from=<root@kwickservers.com>, size=4440, nrcpt=1 (queue active)
Aug 9 06:38:53 kwickservers amavis[1165]: (01165-04) Passed CLEAN, <root@kwickservers.com> -> <root@kwickservers.com>, Message-ID: <20100809103853.2C7F2CC330@mail.kwickservers.com>, mail_id: JpnA409Nrr2U, Hits: 2.43, size: 3968, queued_as: A6467CC2A0, 501 ms
Aug 9 06:38:53 kwickservers postfix/smtp[14465]: 2C7F2CC330: to=<root@kwickservers.com>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.56, delays=0.04/0.01/0/0.5, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=01165-04, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as A6467CC2A0)
Aug 9 06:38:53 kwickservers postfix/qmgr[1747]: 2C7F2CC330: removed
Aug 9 06:38:53 kwickservers postfix/local[14499]: A6467CC2A0: to=<kwick@kwickservers.com>, orig_to=<root@kwickservers.com>, relay=local, delay=0.08, delays=0.04/0.04/0/0, dsn=2.0.0, status=sent (delivered to maildir)
Aug 9 06:38:53 kwickservers postfix/qmgr[1747]: A6467CC2A0: removed
Aug 9 06:40:01 kwickservers pop3d: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:40:01 kwickservers pop3d: Disconnected, ip=[::ffff:127.0.0.1]
Aug 9 06:40:01 kwickservers imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:40:01 kwickservers imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
Aug 9 06:40:01 kwickservers postfix/smtpd[14536]: connect from localhost.localdomain[127.0.0.1]
Aug 9 06:40:01 kwickservers postfix/smtpd[14536]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
Aug 9 06:40:01 kwickservers postfix/smtpd[14536]: disconnect from localhost.localdomain[127.0.0.1]
Aug 9 06:45:01 kwickservers postfix/smtpd[14593]: connect from localhost.localdomain[127.0.0.1]
Aug 9 06:45:01 kwickservers imapd: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:45:01 kwickservers imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0
Aug 9 06:45:01 kwickservers pop3d: Connection, ip=[::ffff:127.0.0.1]
Aug 9 06:45:01 kwickservers pop3d: Disconnected, ip=[::ffff:127.0.0.1]
Aug 9 06:45:01 kwickservers postfix/smtpd[14593]: lost connection after CONNECT from localhost.localdomain[127.0.0.1]
Aug 9 06:45:01 kwickservers postfix/smtpd[14593]: disconnect from localhost.localdomain[127.0.0.1]
|

10th August 2010, 16:18
|
|
Super Moderator
|
|
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,665
Thanks: 1,896
Thanked 2,594 Times in 2,445 Posts
|
|
I can't reach your mailserver:
Code:
mh1:~# telnet mail.kwickservers.com 25
Trying 68.44.214.20...
That's why I think your mails are delivered to the second MX server...
Code:
mh1:~# dig mx kwickbid.com
; <<>> DiG 9.3.4 <<>> mx kwickbid.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58665
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;kwickbid.com. IN MX
;; ANSWER SECTION:
kwickbid.com. 600 IN MX 25 guide.mx.dnspark.net.
kwickbid.com. 7200 IN MX 10 mail.kwickservers.com.
;; Query time: 66 msec
;; SERVER: 213.133.98.98#53(213.133.98.98)
;; WHEN: Tue Aug 10 16:29:06 2010
;; MSG SIZE rcvd: 100
mh1:~#
Are you sure that guide.mx.dnspark.net is set up to accept mails for admin@kwickbid.com?
|
| Thread Tools |
|
|
| Display Modes |
Linear Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +2. The time now is 08:02.
|
|
Recent comments
1 day 8 hours ago
1 day 8 hours ago
1 day 13 hours ago
1 day 19 hours ago
1 day 20 hours ago
1 day 21 hours ago
2 days 2 hours ago
2 days 8 hours ago
2 days 12 hours ago
2 days 14 hours ago