webadmin-list — Webmin users mailing list

Re: [webmin-l] Advanced Persistent Threat (APT) hackers had hacked into my Virtualmin Linux Virtual Private Server (VPS) on 15 Dec 2025 Monday around noon time

[Turritopsis D. T. En M. <teo...@pr...>]

Hi guys,

It appears that my /etc/postfix/virtual configuration file was modified. I have no idea whether it was Advanced Persistent Threat (APT) hackers who modified it or something else on my Linux server modified it. But if it were Advanced Persistent Threat (APT) hackers, I am nowhere as smart and intelligent as them, for they are extremely good in hiding their tracks. I am clearly no match at all for Advanced Persistent Threat (APT) hackers. Apparently my /etc/postfix/virtual was modified to a breaking point after I had created a new email account "al...@te..." on 15 Dec 2025 Monday at around 12.29 PM Singapore Time. I was helping my client to configure email alerts in their Lenovo ThinkSystem SR530 server XClarity Controller when Gmail and their corporate email don't work.

Now, here is what I have done on my Virtualmin Linux VPS to solve the problem (as advised by the community and generative AI).

Edit /etc/postfix/main.cf

I have removed the domains teo-en-ming.com and teo-en-ming-corp.com from the mydestination directive.

Now my FINAL mydestination looks like:

mydestination = $myhostname, localhost.$mydomain, localhost, ns1.turritopsis-dohrnii-teo-en-ming.com

Save the changes to /etc/postfix/main.cf

Since my present /etc/postfix/virtual is not working, I have renamed it.

# cd /etc/postfix

# mv virtual virtual.notworking

I have decided to restore virtual.rpmsave which has a timestamp of 14 Dec 2022 (3 years ago).

# cp virtual.rpmsave virtual

# postmap /etc/postfix/virtual

# systemctl restart postfix

Now I have managed to solve the problem with the help and assistance of the folks at Virtualmin community and elsewhere. Their help and assistance is deeply appreciated. Many thanks.
Now all of my email accounts hosted in Virtualmin Linux VPS are able to receive emails.

Before solving the problem tonight / this evening, GMail used to send me Delivery Staus Notification (Failure).

[QUOTE]
Message not delivered

Your message couldn't be delivered to ce...@te... because the remote server is misconfigured. See the technical details below for more information.

The response from the remote server was:
554 5.7.1 : Relay access denied
[/QUOTE]

Thank you for all the help and advise guys! The cause of the problem is with /etc/postfix/virtual and not /etc/postfix/main.cf. But I still have no idea who or what modified /etc/postfix/virtual that caused my Linux mail server to go down. I am no forensic expert.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Extremely Democratic People's Republic of Singapore
18 Dec 2025 Thursday 11.02 pm Singapore Time






On Wednesday, December 17th, 2025 at 4:04 PM, Turritopsis Dohrnii Teo En Ming <teo...@pr...> wrote:

> 
> 
> Subject: Advanced Persistent Threat (APT) hackers had hacked into my Virtualmin Linux Virtual Private Server (VPS) on 15 Dec 2025 Monday around noon time
> 
> Good day from Singapore,
> 
> Today 17 Dec 2025 Wednesday around 12.30 PM, I was trying to use GMail (Google Mail) to send email to my email accounts hosted in Virtualmin Linux Virtual Private Server (VPS) (aka web hosting control panel). GMail reported the error "554 5.7.1 Relay access denied". Which means all of my email accounts hosted in Virtualmin Linux VPS could no longer receive emails.
> 
> Advanced Persistent Threat (APT) hackers must have hacked into my Virtualmin Linux VPS and changed my server configuration.
> 
> Webmin version: 2.520
> Virtualmin version: 7.50.0 GPL
> Operating system: AlmaLinux 9.6
> Usermin version: 2.420
> Authentic theme version: 25.20
> Linux Kernel and CPU: Linux 5.14.0-570.51.1.el9_6.x86_64 on x86_64
> 
> When I logged in to Roundcube Webmail, I noticed that I had stopped receiving emails with the email accounts hosted in Virtualmin Linux VPS since 15 Dec 2025 Monday around 12 noon Singapore Time.
> 
> When I checked /var/log/maillog in Virtualmin Linux VPS, I observed that I had started getting "554 5.7.1 Relay access denied" errors since 15 Dec 2025 Monday around 12.28 PM (for my email accounts hosted in Virtualmin Linux VPS).
> 
> Advanced Persistent Threat (APT) hackers must have hacked into my Virtualmin Linux VPS and changed my server configuration.
> 
> When I checked /etc/postfix/main.cf on my Virtualmin Linux VPS, Advanced Persistent Threat (APT) hackers had changed the following line to:
> 
> mydestination = $myhostname, localhost.$mydomain, localhost, ns1.turritopsis-dohrnii-teo-en-ming.com
> 
> I had to change the above line back to:
> 
> mydestination = $myhostname, localhost.$mydomain, localhost, ns1.turritopsis-dohrnii-teo-en-ming.com, teo-en-ming.com, teo-en-ming-corp.com
> 
> And then restart Postfix daemon/service (systemctl restart postfix).
> 
> For Virtual Server teo-en-ming-corp.com in Virtualmin Linux VPS:
> 
> Advanced Persistent Threat (APT) hackers had changed my email account user's Login access to Database, FTP and SSH. I had to change it back to Database, Email, FTP and SSH.
> 
> Advanced Persistent Threat (APT) hackers had also changed "Primary email address enabled" to No. I had to change it back to Yes.
> 
> For Virtual Server teo-en-ming.com in Virtualmin Linux VPS:
> 
> Advanced Persistent Threat (APT) hackers had changed my email account user's Login access to FTP and SSH. I had to change it back to Email, FTP and SSH.
> 
> Advanced Persistent Threat (APT) hackers had also changed "Primary email address enabled" to No. I had to change it back to Yes.
> 
> After making all of the above changes, I am able to start receiving emails with my email accounts hosted in Virtualmin Linux VPS since 1.15 PM today 17 Dec 2025 Wednesday.
> 
> When I checked OpenSSH server logins and Virtualmin logins, only public IPv4 addresses belonging to me were present. There were no traces of Advanced Persistent Threat (APT) hackers gaining unauthorized entry into my Virtualmin Linux VPS at all. Of course, if they are Advanced Persistent Threat (APT) hackers, they must be very smart and intelligent (their intelligence quotient IQ sure way above me) to remove all traces of their unauthorized intrusions into my Virtualmin Linux VPS.
> 
> How can I make a request to Advanced Persistent Threat (APT) hackers so that they will stop playing pranks on my Android (Linux) phones, home desktop computer, laptops, Virtualmin and Webmin Linux servers and other various numerous online accounts not secured with 2FA / MFA?
> 
> Please advise.
> 
> Thank you very much.
> 
> Regards,
> 
> Mr. Turritopsis Dohrnii Teo En Ming
> Extremely Democratic People's Republic of Singapore
> 17 Dec 2025 Wednesday 3.50 PM Singapore Time
> 
> 

[webmin-l] Advanced Persistent Threat (APT) hackers had hacked into my Virtualmin Linux Virtual Private Server (VPS) on 15 Dec 2025 Monday around noon time

[Turritopsis D. T. En M. <teo...@pr...>]

Subject: Advanced Persistent Threat (APT) hackers had hacked into my Virtualmin Linux Virtual Private Server (VPS) on 15 Dec 2025 Monday around noon time

Good day from Singapore,

Today 17 Dec 2025 Wednesday around 12.30 PM, I was trying to use GMail (Google Mail) to send email to my email accounts hosted in Virtualmin Linux Virtual Private Server (VPS) (aka web hosting control panel). GMail reported the error "554 5.7.1 Relay access denied". Which means all of my email accounts hosted in Virtualmin Linux VPS could no longer receive emails.

Advanced Persistent Threat (APT) hackers must have hacked into my Virtualmin Linux VPS and changed my server configuration.

Webmin version: 2.520
Virtualmin version: 7.50.0 GPL
Operating system: AlmaLinux 9.6
Usermin version: 2.420
Authentic theme version: 25.20
Linux Kernel and CPU: Linux 5.14.0-570.51.1.el9_6.x86_64 on x86_64

When I logged in to Roundcube Webmail, I noticed that I had stopped receiving emails with the email accounts hosted in Virtualmin Linux VPS since 15 Dec 2025 Monday around 12 noon Singapore Time.

When I checked /var/log/maillog in Virtualmin Linux VPS, I observed that I had started getting "554 5.7.1 Relay access denied" errors since 15 Dec 2025 Monday around 12.28 PM (for my email accounts hosted in Virtualmin Linux VPS).

Advanced Persistent Threat (APT) hackers must have hacked into my Virtualmin Linux VPS and changed my server configuration.

When I checked /etc/postfix/main.cf on my Virtualmin Linux VPS, Advanced Persistent Threat (APT) hackers had changed the following line to:

mydestination = $myhostname, localhost.$mydomain, localhost, ns1.turritopsis-dohrnii-teo-en-ming.com

I had to change the above line back to:

mydestination = $myhostname, localhost.$mydomain, localhost, ns1.turritopsis-dohrnii-teo-en-ming.com, teo-en-ming.com, teo-en-ming-corp.com

And then restart Postfix daemon/service (systemctl restart postfix).

For Virtual Server teo-en-ming-corp.com in Virtualmin Linux VPS:

Advanced Persistent Threat (APT) hackers had changed my email account user's Login access to Database, FTP and SSH. I had to change it back to Database, Email, FTP and SSH.

Advanced Persistent Threat (APT) hackers had also changed "Primary email address enabled" to No. I had to change it back to Yes.

For Virtual Server teo-en-ming.com in Virtualmin Linux VPS:

Advanced Persistent Threat (APT) hackers had changed my email account user's Login access to FTP and SSH. I had to change it back to Email, FTP and SSH.

Advanced Persistent Threat (APT) hackers had also changed "Primary email address enabled" to No. I had to change it back to Yes.

After making all of the above changes, I am able to start receiving emails with my email accounts hosted in Virtualmin Linux VPS since 1.15 PM today 17 Dec 2025 Wednesday.

When I checked OpenSSH server logins and Virtualmin logins, only public IPv4 addresses belonging to me were present. There were no traces of Advanced Persistent Threat (APT) hackers gaining unauthorized entry into my Virtualmin Linux VPS at all. Of course, if they are Advanced Persistent Threat (APT) hackers, they must be very smart and intelligent (their intelligence quotient IQ sure way above me) to remove all traces of their unauthorized intrusions into my Virtualmin Linux VPS.

How can I make a request to Advanced Persistent Threat (APT) hackers so that they will stop playing pranks on my Android (Linux) phones, home desktop computer, laptops, Virtualmin and Webmin Linux servers and other various numerous online accounts not secured with 2FA / MFA?

Please advise.

Thank you very much.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Extremely Democratic People's Republic of Singapore
17 Dec 2025 Wednesday 3.50 PM Singapore Time

[webmin-l] How can I upgrade my Virtualmin master server from AlmaLinux 9.6 to AlmaLinux 10.0?

[Turritopsis D. T. En M. <teo...@pr...>]

Subject: How can I upgrade my Virtualmin master server from AlmaLinux 9.6 to AlmaLinux 10.0?

Good day from Singapore,

I have just upgraded my Virtualmin master server from AlmaLinux 9.5 to AlmaLinux 9.6 on 17 Oct 2025 Friday afternoon.

But how can I upgrade from AlmaLinux 9.6 to AlmaLinux 10.0?

No options were shown in the Virtualmin dashboard.

Looking forward to your reply.

Thank you.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Singapore
18 Oct 2025 Saturday 12.48 AM

[webmin-l] Bash automation for Webmin

[Travis B. <tb...@gm...>]

Hello,

I developed Bash scripts to automate the installation and
configuration of open-source software (i.e., launchpad.net/linuxha and
launchpad.net/linuxsoho). I want to make sure the syntax of these
scripts is perfect so I can use them as teaching tools to educate
people about Linux.

I need to know if there is anything misconfigured with my Webmin syntax.

If you find a bug in LinuxHA or LinuxSOHO, please submit a bug report
to bugs.launchpad.net/linuxha/+filebug or
bugs.launchpad.net/linuxsoho/+filebug.

Kind regards,

Travis Bean

Re: [webmin-l] BIND9

[Jamie C. <jca...@we...>]

Would it be possible to get the full output from those backup-domain and restore-domain commands? I'd like to see what it says about slave servers..



On 18/Apr/2025 11:51 Dave Overton via webadmin-list  wrote ..  Sometimes issues get too complex:  NS2 has been in service with just webmin installed for years, just being a slave/secondary server.NS(others) come and go on individual virtualmin managed servers.NS11 is moving from Centos to Rocky.  NS2 is sitting bored and doing its jobNS11 has been in service for years.Do the migrate thing, (just started over to verify all this)Restore step “creates records on NS2”  But really doesn’t.  (I manually fixed the “slave/secondary” issue a while back and my fix is still in place)Delete from rocky install to see what happens, says it removed records from NS2, but doesn’t. Make any sense to you? End result, removing a domain from a migrated install, doesn’t remove the secondary dns records. Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751  From: Jamie Cameron  
Sent: Friday, April 18, 2025 10:49 AM
To: da...@sy...; Webmin users list 
Subject: Re: [webmin-l] BIND9 Were the same cluster slave servers already registered on the destination system? That would be required for this to work ...   
On 17/Apr/2025 15:14 Dave Overton via webadmin-list wrote .. Found another strange thing. (I’m moving a bunch of domains to a new server, so fun things abound.) This is technically a Virtualmin issue, but it’s sort of connected. This page:  https://www.virtualmin.com/docs/data-operations/how-to-migrate-to-a-new-server First this:virtualmin backup-domain -- dest /root/backups/ --all-domains --all-features --newformat --all-virtualmin  Then This:virtualmin restore-domain --source /root/backups/virtualmin.tar.gz --all-virtualmin The “Cluster Slave Servers” don’t make the trip.  So the restored domains (next thing on the list of things to do) fails to setup the secondary server on the rem ote machine, but it thinks it did…  And doesn’t mention that all the create/delete on the “other” server fails. Like this:Deleting secondary DNS zone on ns2.syix.com ..
.. done  Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751  From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 6:12 PM
To: da...@sy...
Cc: web...@li...
Subject: Re: [webmin-l] BIND9 Ok maybe Webmin is parsing the config incorrectly. Can you attach the block from named.conf for one of these problem slave domains? 
On 16/Apr/2025 17:14 Dave Overton wrote .. In the list of domains, open a slave domain.  (one that works already)Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file. There are lot s of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone. Not a political statement, just annoying that the server and webmin don’t use the same terms. Dave Overton< /span>OwnerSYIX.COMsms or voice 530.755.1751  From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy...; Webmin users list 
Cc: web...@li...; Dave Overton 
Subject: Re: [webmin-l] BIND9 Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug. What goes wrong exactly when you try to add a zone?   
On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary” The folders on a default install look like this: drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.rootdrwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/ So, now take a look at the Bind Mod ule in Webmin. Add a domain to the “Master” failsAdd a domain as a “Slave” fails. Not unexpected, as those folders aren’t there anymore. But anyway, figured I would point it out, since I know you have nothing
  else to do  😊  (and yes, I have it working, just requires a bit of fiddling) (maybe there is a new hidden Bind9 module?)   Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751     
 
 

Re: [webmin-l] BIND9

[Dave O. <da...@sy...>]

Sometimes issues get too complex:

 

1.	NS2 has been in service with just webmin installed for years, just being a slave/secondary server.
2.	NS(others) come and go on individual virtualmin managed servers.
3.	NS11 is moving from Centos to Rocky.  NS2 is sitting bored and doing its job
4.	NS11 has been in service for years.
5.	Do the migrate thing, (just started over to verify all this)
6.	Restore step “creates records on NS2”  But really doesn’t.  (I manually fixed the “slave/secondary” issue a while back and my fix is still in place)
7.	Delete from rocky install to see what happens, says it removed records from NS2, but doesn’t.

 

Make any sense to you?

 

End result, removing a domain from a migrated install, doesn’t remove the secondary dns records.

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron <jca...@we...> 
Sent: Friday, April 18, 2025 10:49 AM
To: da...@sy...; Webmin users list <web...@li...>
Subject: Re: [webmin-l] BIND9

 

Were the same cluster slave servers already registered on the destination system? That would be required for this to work ...

 

 

 


On 17/Apr/2025 15:14 Dave Overton via webadmin-list wrote .. 

Found another strange thing.

 

(I’m moving a bunch of domains to a new server, so fun things abound.)

 

This is technically a Virtualmin issue, but it’s sort of connected.

 

This page:  https://www.virtualmin.com/docs/data-operations/how-to-migrate-to-a-new-server

 

First this:

virtualmin backup-domain -- dest /root/backups/ --all-domains --all-features --newformat --all-virtualmin  

Then This:

virtualmin restore-domain --source /root/backups/virtualmin.tar.gz --all-virtualmin

 

The “Cluster Slave Servers” don’t make the trip.  So the restored domains (next thing on the list of things to do) fails to setup the secondary server on the rem ote machine, but it thinks it did…  And doesn’t mention that all the create/delete on the “other” server fails.

 

Like this:

Deleting secondary DNS zone on ns2.syix.com ..
.. done

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 6:12 PM
To: da...@sy... <mailto:da...@sy...> 
Cc: web...@li... <mailto:web...@li...> 
Subject: Re: [webmin-l] BIND9

 

Ok maybe Webmin is parsing the config incorrectly. Can you attach the block from named.conf for one of these problem slave domains?

 


On 16/Apr/2025 17:14 Dave Overton wrote .. 

In the list of domains, open a slave domain.  (one that works already)

Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file.

 

There are lot s of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone.

 

Not a political statement, just annoying that the server and webmin don’t use the same terms.

 

Dave Overton< /span>

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy...; Webmin users list 
Cc: web...@li...; Dave Overton 
Subject: Re: [webmin-l] BIND9

 

Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug.

 

What goes wrong exactly when you try to add a zone?

 

 

 


On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. 

Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary”

 

The folders on a default install look like this:

 

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample

-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.root

drwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/

drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/

 

So, now take a look at the Bind Mod ule in Webmin.

 

Add a domain to the “Master” fails

Add a domain as a “Slave” fails.

 

Not unexpected, as those folders aren’t there anymore.

 

But anyway, figured I would point it out, since I know you have nothing else to do  😊  (and yes, I have it working, just requires a bit of fiddling)

 

(maybe there is a new hidden Bind9 module?)

 

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

 

 

 

Re: [webmin-l] BIND9

[Jamie C. <jca...@we...>]

Were the same cluster slave servers already registered on the destination system? That would be required for this to work ...



On 17/Apr/2025 15:14 Dave Overton via webadmin-list  wrote ..  Found another strange thing. (I’m moving a bunch of domains to a new server, so fun things abound.) This is technically a Virtualmin issue, but it’s sort of connected. This page:  https://www.virtualmin.com/docs/data-operations/how-to-migrate-to-a-new-server First this:virtualmin backup-domain --dest /root/backups/ --all-domains --all-features --newformat --all-virtualmin  Then This:virtualmin restore-domain --source /root/backups/virtualmin.tar.gz --all-virtualmin The “Cluster Slave Servers” don’t make the trip.  So the restored domains (next thing on the list of things to do) fails to setup the secondary server on the remote machine, but it thinks it did…  And doesn’t mention that all the create/delete on the “other” server fails. Like this:Deleting secondary DNS zone on ns2.syix.com ..
.. done  Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751  From: Jamie Cameron  
Sent: Wednesday, April 16, 2025 6:12 PM
To: da...@sy...
Cc: web...@li...
Subject: Re: [webmin-l] BIND9 Ok maybe Webmin is parsing the config incorrectly. Can you attach the block from named.conf for one of these problem slave domains? 
On 16/Apr/2025 17:14 Dave Overton wrote .. In the list of domains, open a slave domain.  (one that works already)Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file. There are lot s of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone. Not a political statement, just annoying that the server and webmin don’t use the same terms. Dave Overton< /span>OwnerSYIX.COMsms or voice 530.755.1751  From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy...; Webmin users list 
Cc: web...@li...; Dave Overton 
Subject: Re: [webmin-l] BIND9 Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug. What goes wrong exactly when you try to add a zone?   
On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary” The folders on a default install look like this: drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.rootdrwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/ So, now take a look at the Bind Module in Webmin. Add a domain to the “Master” failsAdd a domain as a “Slave” fails. Not unexpected, as those folders aren’t there anymore. But anyway, figured I would point it out, since I know you have nothing 
 else to do  😊  (and yes, I have it working, just requires a bit of fiddling) (maybe there is a new hidden Bind9 module?)   Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751    
 
 

Re: [webmin-l] BIND9

[Dave O. <da...@sy...>]

Found another strange thing.

 

(I’m moving a bunch of domains to a new server, so fun things abound.)

 

This is technically a Virtualmin issue, but it’s sort of connected.

 

This page:  https://www.virtualmin.com/docs/data-operations/how-to-migrate-to-a-new-server

 

First this:

virtualmin backup-domain --dest /root/backups/ --all-domains --all-features --newformat --all-virtualmin  

Then This:

virtualmin restore-domain --source /root/backups/virtualmin.tar.gz --all-virtualmin

 

The “Cluster Slave Servers” don’t make the trip.  So the restored domains (next thing on the list of things to do) fails to setup the secondary server on the remote machine, but it thinks it did…  And doesn’t mention that all the create/delete on the “other” server fails.

 

Like this:

Deleting secondary DNS zone on ns2.syix.com ..
.. done

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron <jca...@we...> 
Sent: Wednesday, April 16, 2025 6:12 PM
To: da...@sy...
Cc: web...@li...
Subject: Re: [webmin-l] BIND9

 

Ok maybe Webmin is parsing the config incorrectly. Can you attach the block from named.conf for one of these problem slave domains?

 


On 16/Apr/2025 17:14 Dave Overton wrote .. 

In the list of domains, open a slave domain.  (one that works already)

Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file.

 

There are lot s of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone.

 

Not a political statement, just annoying that the server and webmin don’t use the same terms.

 

Dave Overton< /span>

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy... <mailto:da...@sy...> ; Webmin users list 
Cc: web...@li... <mailto:web...@li...> ; Dave Overton 
Subject: Re: [webmin-l] BIND9

 

Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug.

 

What goes wrong exactly when you try to add a zone?

 

 

 


On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. 

Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary”

 

The folders on a default install look like this:

 

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample

-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.root

drwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/

drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/

 

So, now take a look at the Bind Module in Webmin.

 

Add a domain to the “Master” fails

Add a domain as a “Slave” fails.

 

Not unexpected, as those folders aren’t there anymore.

 

But anyway, figured I would point it out, since I know you have nothing else to do  😊  (and yes, I have it working, just requires a bit of fiddling)

 

(maybe there is a new hidden Bind9 module?)

 

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

 

 

Re: [webmin-l] BIND9

[Dave O. <da...@sy...>]

Working version:

 

zone "hunt-fish-game." {

              type secondary;

              primaries {

                             162.17.94.53;

                             };

              file "secondary/hunt-fish-game.com.hosts";

              };

 

Add a “master” to the Edit Zone Options:

 

zone "hunt-fish-game." {

              type secondary;

              primaries {

                             162.17.94.53;

                                                          };

              file "secondary/hunt-fish-game.com.hosts";

              masters {

                             162.17.94.53;

                             };

              };

 

 

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron <jca...@we...> 
Sent: Wednesday, April 16, 2025 6:12 PM
To: da...@sy...
Cc: web...@li...
Subject: Re: [webmin-l] BIND9

 

Ok maybe Webmin is parsing the config incorrectly. Can you attach the block from named.conf for one of these problem slave domains?

 


On 16/Apr/2025 17:14 Dave Overton wrote .. 

In the list of domains, open a slave domain.  (one that works already)

Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file.

 

There are lot s of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone.

 

Not a political statement, just annoying that the server and webmin don’t use the same terms.

 

Dave Overton< /span>

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron 
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy... <mailto:da...@sy...> ; Webmin users list 
Cc: web...@li... <mailto:web...@li...> ; Dave Overton 
Subject: Re: [webmin-l] BIND9

 

Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug.

 

What goes wrong exactly when you try to add a zone?

 

 

 


On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. 

Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary”

 

The folders on a default install look like this:

 

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample

-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.root

drwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/

drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/

 

So, now take a look at the Bind Module in Webmin.

 

Add a domain to the “Master” fails

Add a domain as a “Slave” fails.

 

Not unexpected, as those folders aren’t there anymore.

 

But anyway, figured I would point it out, since I know you have nothing else to do  😊  (and yes, I have it working, just requires a bit of fiddling)

 

(maybe there is a new hidden Bind9 module?)

 

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

 

 

Re: [webmin-l] BIND9

[Jamie C. <jca...@we...>]

Ok maybe Webmin is parsing the config incorrectly. Can you attach the block from named.conf for one of these problem slave domains?

On 16/Apr/2025 17:14 Dave Overton  wrote ..  In the list of domains, open a slave domain.  (one that works already)Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file. There are lots of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone. Not a political statement, just annoying that the server and webmin don’t use the same terms. Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751  From: Jamie Cameron  
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy...; Webmin users list 
Cc: web...@li...; Dave Overton 
Subject: Re: [webmin-l] BIND9 Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug. What goes wrong exactly when you try to add a zone?   
On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary” The folders on a default install look like this: drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.rootdrwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/ So, now take a look at the Bind Module in Webmin. Add a domain to the “Master” failsAdd a domain as a “Slave” fails. Not unexpected, as those folders aren’t there anymore. But anyway, figured I would point it out, since I know you have nothing 
 else to do  😊  (and yes, I have it working, just requires a bit of fiddling) (maybe there is a new hidden Bind9 module?)   Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751   
 
 

Re: [webmin-l] BIND9

[Dave O. <da...@sy...>]

In the list of domains, open a slave domain.  (one that works already)

Look at the top, “Master servers” is empty.  Technically since there are no master servers any more guess that’s correct, but the primary server should be listed there, and if I do add a server there it gets entered wrong in the named.conf file.

 

There are lots of places that the “master/slave” references are still there instead of “primary/secondary” but that can be generally handled, but I think probably for consistency the master/slave stuff should be gone.

 

Not a political statement, just annoying that the server and webmin don’t use the same terms.

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

From: Jamie Cameron <jca...@we...> 
Sent: Wednesday, April 16, 2025 4:05 PM
To: da...@sy...; Webmin users list <web...@li...>
Cc: web...@li...; Dave Overton <da...@sy...>
Subject: Re: [webmin-l] BIND9

 

Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug.

 

What goes wrong exactly when you try to add a zone?

 

 

 


On 16/Apr/2025 12:23 Dave Overton via webadmin-list wrote .. 

Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary”

 

The folders on a default install look like this:

 

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample

-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.root

drwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/

drwxr-xr-x  2 bind bind&nbs p; uarch     2 Apr  2 23:37 working/

 

So, now take a look at the Bind Module in Webmin.

 

Add a domain to the “Master” fails

Add a domain as a “Slave” fails.

 

Not unexpected, as those folders aren’t there anymore.

 

But anyway, figured I would point it out, since I know you have nothing else to do  😊  (and yes, I have it working, just requires a bit of fiddling)

 

(maybe there is a new hidden Bind9 module?)

 

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

 

Re: [webmin-l] BIND9

[Jamie C. <jca...@we...>]

 Webmin should already handle the different names for master/primary and secondary/slave zone names, unless there's a bug.
What goes wrong exactly when you try to add a zone?



On 16/Apr/2025 12:23 Dave Overton via webadmin-list  wrote ..  Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary” The folders on a default install look like this: drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.rootdrwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 working/ So, now take a look at the Bind Module in Webmin. Add a domain to the “Master” failsAdd a domain as a “Slave” fails. Not unexpected, as those folders aren’t there anymore. But anyway, figured I would point it out, since I know you have nothing else
  to do  😊  (and yes, I have it working, just requires a bit of fiddling) (maybe there is a new hidden Bind9 module?)   Dave OvertonOwnerSYIX.COMsms or voice 530.755.1751  
 
 

[webmin-l] BIND9

[Dave O. <da...@sy...>]

Bind 9 is “woke” and has been for a while, so we no longer have “Master/Slave” its been replaced by “Primary/Secondary”

 

The folders on a default install look like this:

 

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 dynamic/

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf

-rw-r--r--  1 root wheel uarch 21992 Apr  2 23:37 named.conf.sample

-rw-r--r--  1 root wheel uarch  3314 Apr  2 23:37 named.root

drwxr-xr-x  2 root wheel uarch     5 Apr 16 11:31 primary/

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 secondary/

drwxr-xr-x  2 bind bind  uarch     2 Apr  2 23:37 working/

 

So, now take a look at the Bind Module in Webmin.

 

Add a domain to the “Master” fails

Add a domain as a “Slave” fails.

 

Not unexpected, as those folders aren’t there anymore.

 

But anyway, figured I would point it out, since I know you have nothing else to do  😊  (and yes, I have it working, just requires a bit of fiddling)

 

(maybe there is a new hidden Bind9 module?)

 

 

 

Dave Overton

Owner

SYIX.COM

sms or voice 530.755.1751 

 

Re: [webmin-l] I have found out the reason why Postfix keeps getting killed by OOM Killer

[Turritopsis D. T. En M. <teo...@pr...>]

On Tuesday, March 4th, 2025 at 8:46 PM, Andrey Repin <anr...@ya...> wrote:

> Greetings, Turritopsis Dohrnii Teo En Ming via webadmin-list!
> 
> > This morning, on 2nd March 2025 Sunday, I suddenly had an idea. I started
> > checking the Mail Queue. There were 115 messages stuck in the Mail Queue!
> > After some deliberation, I decided to clear the mail queue.
> 
> 
> And what was in these messages?
> That should have been the first question you've had.
> WHY did they stuck in the loop?
> I have an unhealthy few of those stuck regularly trying to reach their
> error-path on unreachable destination.

Hi!

I have briefly looked through the mail queue.
There were 100+ mail messages stuck in the mail queue trying to reach unreachable destinations.

> 
> > After clearing the mail queue, my postfix service resumed normal service
> > and no longer gets killed by the OOM Killer. Clearing the mail queue
> > actually solved the problem!
> 
> 
> There are Postfix users pos...@po... mailing list where you
> 
> could have better support for specifically postfix questions.

I had a lengthy discussion on postfix-users mailing list last night.

Thank you.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individuals in Singapore
GIMP = Government-Induced Medical Problems
4th March 2025 Tuesday

> 
> 
> --
> With best regards,
> Andrey Repin
> Tuesday, March 4, 2025 15:42:04
> 
> Sorry for my terrible english...
> 
> 
> 
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] I have found out the reason why Postfix keeps getting killed by OOM Killer

[Andrey R. <anr...@ya...>]

Greetings, Turritopsis Dohrnii Teo En Ming via webadmin-list!

> This morning, on 2nd March 2025 Sunday, I suddenly had an idea. I started
> checking the Mail Queue. There were 115 messages stuck in the Mail Queue!
> After some deliberation, I decided to clear the mail queue.

And what was in these messages?
That should have been the first question you've had.
WHY did they stuck in the loop?
I have an unhealthy few of those stuck regularly trying to reach their
error-path on unreachable destination.

> After clearing the mail queue, my postfix service resumed normal service
> and no longer gets killed by the OOM Killer. Clearing the mail queue
> actually solved the problem!

There are Postfix users <pos...@po...> mailing list where you
could have better support for specifically postfix questions.


-- 
With best regards,
Andrey Repin
Tuesday, March 4, 2025 15:42:04

Sorry for my terrible english...

[webmin-l] Testing

[Turritopsis D. T. En M. <teo...@pr...>]

Sent with Proton Mail secure email.

[webmin-l] I have found out the reason why Postfix keeps getting killed by OOM Killer

[Turritopsis D. T. En M. <teo...@pr...>]

Subject: I have found out the reason why Postfix keeps getting killed by OOM Killer

Good day from Singapore,

On 1st March 2025 Saturday, my Postfix service stopped responding. When I executed the "systemctl status postfix" LINUX command, it shows that postfix was killed by the OOM Killer.

To solve the problem, I tried restarting the postfix service but it did not solve the problem.

Then I tried rebooting my Virtual Private Server (VPS) in Germany but it did not solve the problem.

As a last resort, I tried uninstalling and reinstalling postfix but it did not solve the problem as well.

My postfix service was consuming 6.2 GB of RAM before it got killed by the OOM Killer. The total amount of physical memory (RAM) my VPS has is only 8 GB. No wonder my postfix service keeps getting killed by the OOM Killer. Is this a Denial of Service (DOS) attack?

This morning, on 2nd March 2025 Sunday, I suddenly had an idea. I started checking the Mail Queue. There were 115 messages stuck in the Mail Queue! After some deliberation, I decided to clear the mail queue.

After clearing the mail queue, my postfix service resumed normal service and no longer gets killed by the OOM Killer. Clearing the mail queue actually solved the problem!

But until now I still have no idea why 115 messages stuck in the mail queue will cause postfix to consume ENORMOUS amounts of RAM and cause it to get killed by the OOM Killer. OOM = Out of Memory.

Could somebody explain why? Do you think my Virtualmin VPS server has been compromised by Advanced Persistent Threat (APT) hackers?

I am looking forward to your reply. The last time my postfix service stopped working due to a similar OOM condition was on 11 Jan 2025 Saturday, as posted earlier.

Thank you.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individuals in Singapore
GIMP = Government-Induced Medical Problems
2nd March 2025 Sunday

Re: [webmin-l] Odd information since the last upgrade

[Joaquim H. <jo...@we...>]

OK. I'll keep an eye on it and let you know if I see it anywhere else 
(on other servers).


-joho



On 2025-02-25 02:08, Jamie Cameron wrote:
> The trigger I think was changes in the latest Webmin to detect the
> available ProFTPd modules and version.

Re: [webmin-l] Odd information since the last upgrade

[Jamie C. <jca...@we...>]

The trigger I think was changes in the latest Webmin to detect the 
available ProFTPd modules and version.

On 23/Feb/2025 22:44 Joaquim Homrighausen <jo...@we...> wrote ..
> 
> 
> This is odd, but when I went to check the "Scheduled monitoring" 
> settings, and chose "Save", this behavior stopped. And looking at the 
> cron job now, it has the correct output re-direction.
> 
> I'm not sure what caused the behavior to change in the first place, but 
> it's behaving as expected now.
> 
> 
> -joho
> 
> 
> 
> On 2025-02-19 03:20, Jamie Cameron wrote:
> > This could be due to changes I made in the proftpd module. Let me know
> > if this patch helps : https://github.com/webmin/webmin/commit/cc1ae9d3434196c9659d5f25ea593aa40d0f3007
> 
> 
> 
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Odd information since the last upgrade

[Joaquim H. <jo...@we...>]

This is odd, but when I went to check the "Scheduled monitoring" 
settings, and chose "Save", this behavior stopped. And looking at the 
cron job now, it has the correct output re-direction.

I'm not sure what caused the behavior to change in the first place, but 
it's behaving as expected now.


-joho



On 2025-02-19 03:20, Jamie Cameron wrote:
> This could be due to changes I made in the proftpd module. Let me know
> if this patch helps : https://github.com/webmin/webmin/commit/cc1ae9d3434196c9659d5f25ea593aa40d0f3007

Re: [webmin-l] Odd information since the last upgrade

[Jamie C. <jca...@we...>]

This could be due to changes I made in the proftpd module. Let me know
if this patch helps : https://github.com/webmin/webmin/commit/cc1ae9d3434196c9659d5f25ea593aa40d0f3007

On 17/Feb/2025 23:27 Joaquim Homrighausen <jo...@we...> wrote ..
> 
> After the last upgrade, I'm seeing this in a cron e-mail:
> 
> 2025-02-18 08:15:02,379 my.host.name proftpd[211366]: processing 
> configuration directory '/etc/proftpd/conf.d/'
> 
> It's only on one server (I have proftpd on a few others) ... and it's 
> only for that service ...
> 
> 
> 
> -joho
> 
> 
> 
> 
> 
> 
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Odd information since the last upgrade

[Joaquim H. <jo...@we...>]

> After the last upgrade, I'm seeing this in a cron e-mail: 

> 2025-02-18 08:15:02,379 my.host.name proftpd[211366]: processing 
> configuration directory '/etc/proftpd/conf.d/' 

> It's only on one server (I have proftpd on a few others) ... and it's 
> only for that service ... 


The output is from the monitor.pl script, as run by the configured intervals in "Scheduled monitoring". On that particular service, there are other "monitors" too. 


-joho 

[webmin-l] Odd information since the last upgrade

[Joaquim H. <jo...@we...>]

After the last upgrade, I'm seeing this in a cron e-mail:

2025-02-18 08:15:02,379 my.host.name proftpd[211366]: processing 
configuration directory '/etc/proftpd/conf.d/'

It's only on one server (I have proftpd on a few others) ... and it's 
only for that service ...



-joho

Re: [webmin-l] URGENT help needed with Postfix which stopped working on 11 Jan 2025 Saturday at about 3.00 AM

[Turritopsis D. T. En M. <teo...@pr...>]

Hi,

My Postfix service is now working after I restored main.cf and master.cf Postfix configuration files from the backup archive “virtualmin.tar.gz”.

I can now receive emails.

May I know which other configuration files I would need to restore from the backup archive “virtualmin.tar.gz”??? In case I miss out something.

Please advise.

Thank you.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
13 Jan 2025 Monday 6.00 PM




Sent with Proton Mail secure email.

On Monday, January 13th, 2025 at 5:36 PM, Turritopsis Dohrnii Teo En Ming via webadmin-list <web...@li...> wrote:

> Subject: URGENT help needed with Postfix which stopped working on 11 Jan 2025 Saturday at about 3.00 AM
> 
> SYSTEM INFORMATION
> OS type and version AlmaLinux 9.5
> Webmin version 2.202
> Virtualmin version 7.30.4
> Webserver version 2.4.62
> Related packages Postfix
> 
> Dear Virtualmin and Webmin community,
> 
> I have stopped receiving emails since 11 Jan 2025 Saturday at about 3.00 AM.
> 
> I tried rebooting my AlmaLinux 9.5 Virtual Private Server (VPS) and restarting Postfix but to no avail.
> 
> Whenever I try to start Postfix, the service would be killed by the OOM Killer almost immediately.
> 
> Running "systemctl status postfix" shows oom-kill.
> 
> When I checked /var/log/messages, many related services were also killed by the OOM Killer.
> 
> But this is strange. This should not be happening at all because I have 8 GB of physical memory for my VPS.
> 
> But I do notice there were 100+ messages inside the Postfix message queue. Did my email account(s) get compromised by hackers?
> 
> Then I tried uninstalling the Postfix package and reinstalling Postfix from within Virtualmin.
> 
> After doing this, there were no more oom-kill error messages but Postfix is still not working!
> 
> I suspect that all the Postfix configuration was lost after uninstalling and reinstalling. The message queue was also reduced to zero.
> 
> Before flying to Seoul, South Korea on 7 Jan 2025 Tuesday, I had made a backup of all Virtual Servers and all Virtualmin settings on 5 Jan 2025 Sunday.
> 
> Inside the backup archive "virtualmin.tar.gz", I have the following backup files.
> 
> Volume in drive E is Local Disk
> Volume Serial Number is 287E-92C9
> 
> Directory of E:\temp
> 
> 13/01/2025 05:16 PM <DIR> .
> 
> 13/01/2025 05:16 PM 0 filelist.txt
> 05/01/2025 10:46 PM 0 virtualmin_chroot
> 05/01/2025 10:46 PM 8,615 virtualmin_config
> 14/12/2022 04:45 PM 0 virtualmin_custom
> 14/12/2022 04:45 PM 0 virtualmin_custom_linkcats
> 14/12/2022 04:45 PM 0 virtualmin_custom_links
> 05/01/2025 10:46 PM 0 virtualmin_custom_shells
> 05/01/2025 10:46 PM 20,480 virtualmin_email
> 05/01/2025 10:46 PM 2 virtualmin_mailserver
> 05/01/2025 10:46 PM 135 virtualmin_mailserver_dkim
> 21/10/2021 08:57 PM 1,679 virtualmin_mailserver_dkimkey
> 05/01/2025 10:46 PM 20 virtualmin_mailserver_grey
> 22/09/2016 04:09 PM 9,666 virtualmin_mailserver_greyclients
> 22/09/2016 04:09 PM 188 virtualmin_mailserver_greyrecipients
> 31/12/2024 05:26 PM 30,146 virtualmin_mailserver_maincf
> 23/11/2023 02:10 PM 6,408 virtualmin_mailserver_mastercf
> 05/01/2025 10:46 PM 20 virtualmin_mailserver_ratelimit
> 02/02/2022 01:38 AM 5,592 virtualmin_mailserver_ratelimitconfig
> 05/01/2025 10:46 PM 10,240 virtualmin_scheds
> 05/01/2025 10:46 PM 10,240 virtualmin_scripts
> 05/01/2025 10:46 PM 20,480 virtualmin_templates
> 14/12/2022 04:45 PM 0 virtualmin_templates_global
> 05/01/2025 10:46 PM 10,240 virtualmin_templates_plans
> 05/01/2025 10:46 PM 10,240 virtualmin_templates_skel_0
> 24 File(s) 144,391 bytes
> 1 Dir(s) 641,303,912,448 bytes free
> 
> How should I go about restoring the Postfix configuration which was lost after uninstalling and reinstalling?
> 
> Please advise.
> 
> Thank you very much.
> 
> Regards,
> 
> Mr. Turritopsis Dohrnii Teo En Ming
> Targeted Individual in Singapore
> 13 Jan 2025 Monday 5.26 PM
> 
> 
> 
> 
> REFERENCES
> ==============
> 
> [1] https://forum.virtualmin.com/t/urgent-help-needed-with-postfix-which-stopped-working-on-11-jan-2025-saturday-at-about-3-00-am/131534
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

[webmin-l] URGENT help needed with Postfix which stopped working on 11 Jan 2025 Saturday at about 3.00 AM

[Turritopsis D. T. En M. <teo...@pr...>]

Subject: URGENT help needed with Postfix which stopped working on 11 Jan 2025 Saturday at about 3.00 AM

SYSTEM INFORMATION	
OS type and version	AlmaLinux 9.5
Webmin version	2.202
Virtualmin version	7.30.4
Webserver version	2.4.62
Related packages	Postfix

Dear Virtualmin and Webmin community,

I have stopped receiving emails since 11 Jan 2025 Saturday at about 3.00 AM.

I tried rebooting my AlmaLinux 9.5 Virtual Private Server (VPS) and restarting Postfix but to no avail.

Whenever I try to start Postfix, the service would be killed by the OOM Killer almost immediately.

Running "systemctl status postfix" shows oom-kill.

When I checked /var/log/messages, many related services were also killed by the OOM Killer.

But this is strange. This should not be happening at all because I have 8 GB of physical memory for my VPS.

But I do notice there were 100+ messages inside the Postfix message queue. Did my email account(s) get compromised by hackers?

Then I tried uninstalling the Postfix package and reinstalling Postfix from within Virtualmin.

After doing this, there were no more oom-kill error messages but Postfix is still not working!

I suspect that all the Postfix configuration was lost after uninstalling and reinstalling. The message queue was also reduced to zero.

Before flying to Seoul, South Korea on 7 Jan 2025 Tuesday, I had made a backup of all Virtual Servers and all Virtualmin settings on 5 Jan 2025 Sunday.

Inside the backup archive "virtualmin.tar.gz", I have the following backup files.

 Volume in drive E is Local Disk
 Volume Serial Number is 287E-92C9

 Directory of E:\temp

13/01/2025  05:16 PM    <DIR>          .
13/01/2025  05:16 PM                 0 filelist.txt
05/01/2025  10:46 PM                 0 virtualmin_chroot
05/01/2025  10:46 PM             8,615 virtualmin_config
14/12/2022  04:45 PM                 0 virtualmin_custom
14/12/2022  04:45 PM                 0 virtualmin_custom_linkcats
14/12/2022  04:45 PM                 0 virtualmin_custom_links
05/01/2025  10:46 PM                 0 virtualmin_custom_shells
05/01/2025  10:46 PM            20,480 virtualmin_email
05/01/2025  10:46 PM                 2 virtualmin_mailserver
05/01/2025  10:46 PM               135 virtualmin_mailserver_dkim
21/10/2021  08:57 PM             1,679 virtualmin_mailserver_dkimkey
05/01/2025  10:46 PM                20 virtualmin_mailserver_grey
22/09/2016  04:09 PM             9,666 virtualmin_mailserver_greyclients
22/09/2016  04:09 PM               188 virtualmin_mailserver_greyrecipients
31/12/2024  05:26 PM            30,146 virtualmin_mailserver_maincf
23/11/2023  02:10 PM             6,408 virtualmin_mailserver_mastercf
05/01/2025  10:46 PM                20 virtualmin_mailserver_ratelimit
02/02/2022  01:38 AM             5,592 virtualmin_mailserver_ratelimitconfig
05/01/2025  10:46 PM            10,240 virtualmin_scheds
05/01/2025  10:46 PM            10,240 virtualmin_scripts
05/01/2025  10:46 PM            20,480 virtualmin_templates
14/12/2022  04:45 PM                 0 virtualmin_templates_global
05/01/2025  10:46 PM            10,240 virtualmin_templates_plans
05/01/2025  10:46 PM            10,240 virtualmin_templates_skel_0
              24 File(s)        144,391 bytes
               1 Dir(s)  641,303,912,448 bytes free

How should I go about restoring the Postfix configuration which was lost after uninstalling and reinstalling?

Please advise.

Thank you very much.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
13 Jan 2025 Monday 5.26 PM




REFERENCES
==============

[1] https://forum.virtualmin.com/t/urgent-help-needed-with-postfix-which-stopped-working-on-11-jan-2025-saturday-at-about-3-00-am/131534