Well, it looks that it is actually FreePBX as part of the problem again with some stupid cron jobs.

And there is an issues with Moodle but I think that is more of an authentication issue and not actually a spam issue.

@scottalanmiller said in How can I tell if one of our linux boxes is a spam generator?:

@WLS-ITGuy said in How can I tell if one of our linux boxes is a spam generator?:

@scottalanmiller said in How can I tell if one of our linux boxes is a spam generator?:

Do you have a specific Linux box to check? Or is this a pool of many and you are wondering if "any of them" is compromised?

Single box. It is our Moodle Server which sends email through class discussions.

Oh, that makes it much harder. You are looking for a compromise inside an existing email stream!

That's what I thought.

Email is passed from the Moodle server, to the exchange box, and then to our spam filter. Both incoming and outgoing emails are going through the spam filter.

@scottalanmiller said in How can I tell if one of our linux boxes is a spam generator?:

Do you have a specific Linux box to check? Or is this a pool of many and you are wondering if "any of them" is compromised?

Single box. It is our Moodle Server which sends email through class discussions.

I have all our mail going through our Spam filter. In the last 24 hours our OutgoingQueue has hit over 400. All of them are no names on sender and receiver. How do I check if a linux box has been compromised. I cannot turn it off at this point.

@Emad-R said in UFW rules question:

@WLS-ITGuy

Ok you dont need to make any deny rules, cause by default this is working. Just put the stuff you wish to make exceoption and allow

Then this should be good?

@Emad-R said in UFW rules question:

@WLS-ITGuy

ufw status verbose

will help you more, cause it will show the default incoming and outgoing rule

I see that I have to delete the 1st entry.

I am trying to troubleshoot some weird access on one of our webhosts. I only want 80 and 443 accessible from anywhere, I'd like 587 to be only pointing to our mail server IP, and only want SSH to be allowed from our WAN IP. Am I missing anything?

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@wrx7m said in Reverse Proxy install question:

@WLS-ITGuy What version of vsphere are you running?

6.7u2

They say it is supported...

https://blogs.vmware.com/guestosguide/2019/05/red-hat-enterprise-linux-8.html

REHL 8 is - But using the drop down and selecting Fedora it says it isn't.

Either way, I'll just use REHL 8 and be done.

The drop down list told you RHEL isn't, either. Yet we know it is. ESXi is just broken.

That one doesn't actually tell me it isn't supported:

But the other RHEL one does. So clearly it's broken if it gives conflicting information. In one case, RHEL isn't supported, then RHEL 8 is. But RHEL 8 is still RHEL.

I understand. I guess they don't update the dropdown in the software

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@wrx7m said in Reverse Proxy install question:

@WLS-ITGuy What version of vsphere are you running?

6.7u2

They say it is supported...

https://blogs.vmware.com/guestosguide/2019/05/red-hat-enterprise-linux-8.html

REHL 8 is - But using the drop down and selecting Fedora it says it isn't.

Either way, I'll just use REHL 8 and be done.

The drop down list told you RHEL isn't, either. Yet we know it is. ESXi is just broken.

That one doesn't actually tell me it isn't supported:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@wrx7m said in Reverse Proxy install question:

@WLS-ITGuy What version of vsphere are you running?

6.7u2

They say it is supported...

https://blogs.vmware.com/guestosguide/2019/05/red-hat-enterprise-linux-8.html

REHL 8 is - But using the drop down and selecting Fedora it says it isn't.

Either way, I'll just use REHL 8 and be done.

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

was getting things set up in vsphere to find out that Fedora is not supported

It says Fedora on the list you provided

Yes, and once you select it, the 2nd picture shows that it says it isn't supported.

OIC, lol. It says RHEL is not supported? Something is screwed up.

No. This should clear it up:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

was getting things set up in vsphere to find out that Fedora is not supported

It says Fedora on the list you provided

Yes, and once you select it, the 2nd picture shows that it says it isn't supported.

@wrx7m said in Reverse Proxy install question:

@WLS-ITGuy What version of vsphere are you running?

6.7u2

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

Not that it matters to me but was curious if anyone knows why?

Because there is no reason to. It's the same as RHEL. So you just choose RHEL. The whole "selecting the OS" thing is weird.

Ahh - that makes sense!

Thanks - I learned something today...I can go home now.

@wrx7m said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

I was going to follow @JaredBusch tutorial on using Fedora for the reverse proxy and was getting things set up in vsphere to find out that Fedora is not supported. Not that it matters to me but was curious if anyone knows why?

You mean, Fedora is not listed in the options for creating the VM in vcenter?

and

I was going to follow @JaredBusch tutorial on using Fedora for the reverse proxy and was getting things set up in vsphere to find out that Fedora is not supported. Not that it matters to me but was curious if anyone knows why?

@scottalanmiller said in Does 64 bit or 32 bit really matter?:

@WLS-ITGuy said in Does 64 bit or 32 bit really matter?:

@scottalanmiller said in Does 64 bit or 32 bit really matter?:

Presumably the OS is 64 bit so shouldnt matter.

OK. Linux servers to start. The 32 bit app requires some 32 bit library stuff that I cannot find for Debian 9/10 so I was thinking I could install on a 32bit and go from there.

Do you need to be on Debian? Linux 32bit is a dead animal pretty much across the board. I'm assuming that this is dead software without support? What's the plan in the future as these libraries get more and more rare?

It actually isn't dead. I'm not sure why they haven't made the switch the 64 bit. They just updated the software back in June.

They are both virtual machines but not thin provisioned.

@DustinB3403 said in Does 64 bit or 32 bit really matter?:

@WLS-ITGuy said in Does 64 bit or 32 bit really matter?:

@DustinB3403 said in Does 64 bit or 32 bit really matter?:

@WLS-ITGuy Are the installs big?

One is. The one server has a 200GB hard drive but is only using 16GB. The other is almost 1TB.

So why not create a "new 20GB" version of that 200GB and move the services? I could see how you'd want to save the space. But it seems like a lot of effort if only for 180GB.

Makes sense to me.