UKC

How can I tell if PHP SOAP is installed?

Re: Is PHP SOAP installed? Which version of PHP SOAP do I have?

For dedicated servers, you can tell if PHP SOAP is installed by the running the following command on the console:

# php -i phpinfo | grep soap

The following outpout will confirm you have PHP SOAP installed:

soap
soap.wsdl_cache => 1 => 1
soap.wsdl_cache_dir => /tmp => /tmp
soap.wsdl_cache_enabled => 1 => 1
soap.wsdl_cache_limit => 5 => 5
soap.wsdl_cache_ttl => 86400 => 86400

If you have a shared hosting account and need PHP SOAP, simply contact the Helpdesk to arrange a transfer of your account to a suitable server.

How do I view visitor statistics on my hosting account?

Re: How to enable visitors stats collection in Plesk hosting

Your Plesk Hosting account now comes with 2 options for viewing detailed visitor and traffic statistics concerning your website.

1) AWStats – Get advanced graphical web, ftp or mail statistics
2) Webalizer – statistics for user agents (browsers) and referrers

Visitor statistics collection is not enabled by default. You need to enable this feature as follows:

Simply login to your Plesk Control Panel, select your domain name and click “Web Hosting Settings”, scroll down and select which statistics package you wish to use for this domain.

To be able to view your statistics directly from your domain name (eg. www.yourdomain.com/plesk-stat/webstat) ensure you have a tick in the box that says “(accessible via password protected directory ‘/plesk-stat/webstat/’ )”, this will allow external direct URL access via your FTP password.

Once enabled, your visitor stats will be compiled everyday at 0400 so do not expect to see anything straight away. Simply check the next day and your visitor stats and charts will be available.

For professional high level statistics and analysis we highly recommend using Google Analytics in your website code, you can set up a free account here:

http://www.google.co.uk/analytics

			


					
			





	

					

				
Where is the Plesk maillog located?
		

			 		

					

			
			

				
Re: Where can I find the mail log in Plesk?


The mail logs in Plesk qmail are stored here:


/usr/local/psa/var/log/maillog


You can view the entire maillog like this:


# cat /usr/local/psa/var/log/maillog


Or you can look at the last 150 lines like this:


# tail -150 /usr/local/psa/var/log/maillog


You can watch the maillog devlop in real time like this:


# tail -f /usr/local/psa/var/log/maillog


You can search for specific entries like this:


# tail -500 /usr/local/psa/var/log/maillog | grep test@domain.co.uk


The Plesk maillog is your friend when it comes to finding spammers and email problems on your server.

			


					
			





	

					

				
How do I find the SPAM source on a Plesk server using qmail?
		

			 		

					

			
			

				
Re: Finding spammers in Plesk, find source of spam on Plesk server


If you are hosting a Plesk server wilth multiple sites then eventually you will find that spam will appear from one of those sites and it will be difficult to determine where the spam is coming from. This will put your server IP at risk of being suspended by your server provider.


First things first, let’s check to see if the spam is being sent by a mailbox user, this would indicate deliberate spamming from a client or a compromised password on a mailbox account.


Out of the ordinary authentications


A large number of authentications to a particular mailbox, ie. thousands, can indicate massive email activity, you can check this quickly as follows:


# cat /usr/local/psa/var/log/maillog |grep -I "LOGIN"|awk {'print $12'}|sort|uniq -c|sort -n


If you cannot see anything out of the ordinary, the search continues.


The Maillog is your friend


Let’s take a look at the plesk qmail maillog:


# tail -500 /usr/local/psa/var/log/maillog


Entries like the following indicate the domain and mailbox that the email is being sent from:


Dec  7 10:51:01 server qmail-local-handlers[29265]: from=info@spammerdomain.com


This leaves you no further work to do, possibly suspend the account and contact the client in question. You might want to clear the mail queue in the Plesk panel also.


Difficult to locate spammers


A more difficult situation is where the email is being sent using the Apache user or as anonymous. This type of email spam cannot so easily be traced to a sender as it is not being sent from a mailbox.


These entries look something like this:


Dec  7 10:50:17 server qmail-queue-handlers[29080]: from=anonymous@server.hostname.com


Or like this:


Dec  7 10:50:17 server qmail: 1323255017.404624 info msg 47220220: bytes 501 from <anonymous@server.hostname.com> qp 29081 uid 48


It is not possible to determine the spammer from the maillog in this situation. These emails are being sent using a form processor or other PHP mailer / PERL mailer script.


Track, Trace and Remove


To solve this problem you need to


    

  • Login to the Plesk Control Panel > Home > Mail Settings > Mail Queue
    • 

  • Click on one of the many SPAM emails you will see listed
    • 



Look for this at the top of the mail header:


Received: (qmail 2583 invoked by uid 10211)


Once you have the UID (which in this case in 10211) you can now trace the client like this:


# grep 10211 /etc/passwd


Which will show something like this:


dom74628:x:10211:2523::/var/www/vhosts/thespammerdomain.com:/bin/false


You can now proceed suspend the spam account and remove all the mails from the mail queue.

			


					
			





	

					

				
How do I use iptables to route to another port?
		

			 		

					

			
			

				
You can use iptables pre-routing to route from one port to another.


For example, the following command will enable mail users to use port 26 or port 25 for SMTP request. All port 26 requests will be routed to port 25.


# iptables -t nat -A PREROUTING -p tcp -d 192.168.167.2 --dport 26 -j DNAT --to 192.168.167.2:25


Now your clients can use port 26 or port 25 without any problems.