Webmail / inbox issue

Atres

• June 21, 2023 08:57

Hi, A few weeks ago, I enabled the "zipdownload" extension for roundcube. Everything was working fine, but a few days ago, I received an email indicating that there was a problem with the "zipdownload" extension.

• 

  cPRex Jurassic Moderator

  • June 21, 2023 14:11

  Hey there! It's important to note that cPanel creates our own Roundcube package, so plugins that may work normally on a default Roundcube installation may have unintended consequences on a cPanel system. We can confirm this is a custom package by running the following command, and you'll see it's got a "cpanel-" name: # rpm -qa | grep -i roundcube cpanel-roundcubemail-1.6.0.11-1.cp110~el8.noarch
  Could you paste the output of the following command from your server so we can see what is happening with that port? netstat -lpn | grep 2096
  

  0
• 

  Atres

  • June 21, 2023 14:15

  Hi, rpm -qa | grep -i roundcube cpanel-roundcubemail-1.5.2.6-1.cp108~el7.noarch netstat -lpn | grep 2096 tcp 0 0 0.0.0.0:2096 0.0.0.0:* LISTEN 2427/cpsrvd (SSL) - Thanks, Regards.

  0
• 

  cPRex Jurassic Moderator

  • June 21, 2023 14:20

  Thanks for that - that all looks normal to me. What exactly happens when the user tries to log in? Do you see any errors in /usr/local/cpanel/logs/error_log when you try to login? Does the page refresh or just never load? Whenever there's been an odd change to the system it never hurts to run "/scripts/upcp --force" to ensure that all cPanel packages are in place and that there are no odd issues with the machine.

  0
• 

  Atres

  • June 21, 2023 14:30

  Hi, I login to the webmail and the welcome page appears. I click on "Open" and the page keeps loading until the following message appears: Unable to access this website. **** has closed the connection unexpectedly. Try to: Checking the connection Checking the proxy and the firewall Run Windows Network Diagnostics ERR_CONNECTION_CLOSED ----------------- In the error log I haven't seen any strange logs. I will run the command "/scripts/upcp --force" just in case it solves the problem. Thanks, Regards.

  0
• 

  Atres

  • June 21, 2023 14:34

  Hi, I have run the command "/scripts/upcp --force" but the issue persists. Thanks, Regards.

  0
• 

  cPRex Jurassic Moderator

  • June 21, 2023 15:08

  Interesting - I don't have a good explanation for that behavior. If you aren't finding anything in the cPanel error_log file, it might be time to submit a ticket to our team so we can take a look directly.

  0
• 

  Atres

  • June 21, 2023 15:36

  Hi, The only logs that match webmail accesses are as follows: VAR/LOG/MAILLOG: Jun 21 17:22:07 d10 dovecot: imap-login: Login: user=, method=PLAIN, rip=::1, lip=::1, mpid=6722, TLS, session= Jun 21 17:22:07 d10 dovecot: imap(newsletter@***.com)<6722>: Disconnected: Logged out in=12, out=522, bytes=12/522 Jun 21 17:22:07 d10 dovecot: imap(newsletter@***.com)<41931>: Disconnected: Logged out in=82, out=939, bytes=82/939 VAR/LOG/LFD.LOG: Jun 21 17:20:56 d10 lfd[57950]: *Suspicious Process* PID:41927 PPID:13402 User:**** Uptime:69 secs EXE:/usr/local/cpanel/3rdparty/php/81/sbin/php-fpm CMD:php-fpm: pool user_**** ----- In the ticket do I have to report again what happened or is it enough to link the forum ticket? Thanks, Regards.

  0
• 

  cPRex Jurassic Moderator

  • June 21, 2023 15:43

  Those logs all look normal to me. It would be best to include all data in the ticket so we don't have to go back and forth between the different areas to help resolve the issue.

  0
• 

  Atres

  • June 21, 2023 15:55

  Hi, I have already opened the ticket. Thank you, cPRex!

  0
• 

  cPRex Jurassic Moderator

  • June 21, 2023 15:55

  Can you let me know the number so I can follow along?

  0

Please sign in to leave a comment.