1 Topic by kumar

  • kumar
  • Member
  • Offline
  • Registered: 2021-10-22
  • Posts: 5

Topic: issue on wordpress with iredmail using nginx

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

i have installed iredmail 1.4.2 in ubuntu 20.04 LTS and also created virtual host for wordpress.
iredmail server working perfectly.
but wordpress websites not running

2021/10/26 12:08:13 [error] 2742275#2742275: *153 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.9, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:08:56 [error] 2742275#2742275: *156 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.17, server: a-sat.sg, request: "GET /html HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:09:15 [error] 2742275#2742275: *159 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.19, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:20:54 [error] 2742275#2742275: *165 connect() failed (111: Connection refused) while connecting to upstream, client: 199.249.230.87, server: a-sat.sg, request: "POST /xmlrpc.php HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:24:30 [error] 2959738#2959738: *10 connect() failed (111: Connection refused) while connecting to upstream, client: 109.237.103.123, server: a-sat.sg, request: "GET /.env HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:26:53 [error] 2983259#2983259: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 129.126.68.210, server: a-sat.sg, request: "GET / HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:32:00 [error] 2983259#2983259: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 157.55.39.45, server: a-sat.sg, request: "GET /wp-content/uploads/2015/11/Callisto.jpg HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"

anyone help me on this?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by montanelli

  • montanelli
  • Member
  • Offline
  • Registered: 2021-03-23
  • Posts: 48

Re: issue on wordpress with iredmail using nginx

A good number of those are exploit attempts.

I have at least one of those in my fail2ban custom filters.

149.154.161.x is trying to "hack"

I'd like to see the access.log for those exact error_log hits. Do you see successful hits in your access.log?

Is virtual site path correct? Did you restart nginx after setup?


kumar wrote:

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

i have installed iredmail 1.4.2 in ubuntu 20.04 LTS and also created virtual host for wordpress.
iredmail server working perfectly.
but wordpress websites not running

2021/10/26 12:08:13 [error] 2742275#2742275: *153 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.9, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:08:56 [error] 2742275#2742275: *156 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.17, server: a-sat.sg, request: "GET /html HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:09:15 [error] 2742275#2742275: *159 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.19, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:20:54 [error] 2742275#2742275: *165 connect() failed (111: Connection refused) while connecting to upstream, client: 199.249.230.87, server: a-sat.sg, request: "POST /xmlrpc.php HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:24:30 [error] 2959738#2959738: *10 connect() failed (111: Connection refused) while connecting to upstream, client: 109.237.103.123, server: a-sat.sg, request: "GET /.env HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:26:53 [error] 2983259#2983259: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 129.126.68.210, server: a-sat.sg, request: "GET / HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:32:00 [error] 2983259#2983259: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 157.55.39.45, server: a-sat.sg, request: "GET /wp-content/uploads/2015/11/Callisto.jpg HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"

anyone help me on this?

3 Reply by kumar

  • kumar
  • Member
  • Offline
  • Registered: 2021-10-22
  • Posts: 5

Re: issue on wordpress with iredmail using nginx

yes i can see the access log. but i think php7.4-fpm.sock is not available inside /run/php/ folder.

since iredmail is running fastcgi_pass 127.0.0.1:9999

any way to fix this issue?


montanelli wrote:

A good number of those are exploit attempts.

I have at least one of those in my fail2ban custom filters.

149.154.161.x is trying to "hack"

I'd like to see the access.log for those exact error_log hits. Do you see successful hits in your access.log?

Is virtual site path correct? Did you restart nginx after setup?


kumar wrote:

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

i have installed iredmail 1.4.2 in ubuntu 20.04 LTS and also created virtual host for wordpress.
iredmail server working perfectly.
but wordpress websites not running

2021/10/26 12:08:13 [error] 2742275#2742275: *153 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.9, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:08:56 [error] 2742275#2742275: *156 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.17, server: a-sat.sg, request: "GET /html HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:09:15 [error] 2742275#2742275: *159 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.19, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:20:54 [error] 2742275#2742275: *165 connect() failed (111: Connection refused) while connecting to upstream, client: 199.249.230.87, server: a-sat.sg, request: "POST /xmlrpc.php HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:24:30 [error] 2959738#2959738: *10 connect() failed (111: Connection refused) while connecting to upstream, client: 109.237.103.123, server: a-sat.sg, request: "GET /.env HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:26:53 [error] 2983259#2983259: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 129.126.68.210, server: a-sat.sg, request: "GET / HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:32:00 [error] 2983259#2983259: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 157.55.39.45, server: a-sat.sg, request: "GET /wp-content/uploads/2015/11/Callisto.jpg HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"

anyone help me on this?

4 Reply by kumar

  • kumar
  • Member
  • Offline
  • Registered: 2021-10-22
  • Posts: 5

Re: issue on wordpress with iredmail using nginx

------------------

root@email:/home/kumar# cd /run/php/
root@email:/run/php# ls -lrt
total 4
-rw-r--r-- 1 root root 6 Oct 30 06:27 php7.4-fpm.pid
root@email:/run/php#

-------------------



montanelli wrote:

A good number of those are exploit attempts.

I have at least one of those in my fail2ban custom filters.

149.154.161.x is trying to "hack"

I'd like to see the access.log for those exact error_log hits. Do you see successful hits in your access.log?

Is virtual site path correct? Did you restart nginx after setup?


kumar wrote:

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

i have installed iredmail 1.4.2 in ubuntu 20.04 LTS and also created virtual host for wordpress.
iredmail server working perfectly.
but wordpress websites not running

2021/10/26 12:08:13 [error] 2742275#2742275: *153 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.9, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:08:56 [error] 2742275#2742275: *156 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.17, server: a-sat.sg, request: "GET /html HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:09:15 [error] 2742275#2742275: *159 connect() failed (111: Connection refused) while connecting to upstream, client: 149.154.161.19, server: a-sat.sg, request: "GET /certificate.crt HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:20:54 [error] 2742275#2742275: *165 connect() failed (111: Connection refused) while connecting to upstream, client: 199.249.230.87, server: a-sat.sg, request: "POST /xmlrpc.php HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:24:30 [error] 2959738#2959738: *10 connect() failed (111: Connection refused) while connecting to upstream, client: 109.237.103.123, server: a-sat.sg, request: "GET /.env HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:26:53 [error] 2983259#2983259: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 129.126.68.210, server: a-sat.sg, request: "GET / HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"
2021/10/26 12:32:00 [error] 2983259#2983259: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 157.55.39.45, server: a-sat.sg, request: "GET /wp-content/uploads/2015/11/Callisto.jpg HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "a-sat.sg"

anyone help me on this?