Directadmin Error Apache is functioning normally

Technical topics
41

ps aux

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 19356 1376 ? Ss Apr19 0:00 /sbin/init
root 2 0.0 0.0 0 0 ? S Apr19 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? S Apr19 0:00 [migration/0]
root 4 0.0 0.0 0 0 ? S Apr19 0:00 [ksoftirqd/0]
root 5 0.0 0.0 0 0 ? S Apr19 0:00 [migration/0]
root 6 0.0 0.0 0 0 ? S Apr19 0:00 [watchdog/0]
root 7 0.0 0.0 0 0 ? S Apr19 0:00 [migration/1]
root 8 0.0 0.0 0 0 ? S Apr19 0:00 [migration/1]
root 9 0.0 0.0 0 0 ? S Apr19 0:00 [ksoftirqd/1]
root 10 0.0 0.0 0 0 ? S Apr19 0:00 [watchdog/1]
root 11 0.0 0.0 0 0 ? S Apr19 0:00 [migration/2]
root 12 0.0 0.0 0 0 ? S Apr19 0:00 [migration/2]
root 13 0.0 0.0 0 0 ? S Apr19 0:00 [ksoftirqd/2]
root 14 0.0 0.0 0 0 ? S Apr19 0:00 [watchdog/2]
root 15 0.0 0.0 0 0 ? S Apr19 0:00 [migration/3]
root 16 0.0 0.0 0 0 ? S Apr19 0:00 [migration/3]
root 17 0.0 0.0 0 0 ? S Apr19 0:00 [ksoftirqd/3]
root 18 0.0 0.0 0 0 ? S Apr19 0:00 [watchdog/3]
root 19 0.0 0.0 0 0 ? S Apr19 0:18 [events/0]
root 20 0.0 0.0 0 0 ? S Apr19 0:17 [events/1]
root 21 0.0 0.0 0 0 ? S Apr19 0:18 [events/2]
root 22 0.0 0.0 0 0 ? S Apr19 0:17 [events/3]
root 23 0.0 0.0 0 0 ? S Apr19 0:00 [cgroup]
root 24 0.0 0.0 0 0 ? S Apr19 0:00 [khelper]
root 25 0.0 0.0 0 0 ? S Apr19 0:00 [netns]
root 26 0.0 0.0 0 0 ? S Apr19 0:00 [async/mgr]
root 27 0.0 0.0 0 0 ? S Apr19 0:00 [pm]
root 28 0.0 0.0 0 0 ? S Apr19 0:01 [sync_supers]
root 29 0.0 0.0 0 0 ? S Apr19 0:01 [bdi-default]
root 30 0.0 0.0 0 0 ? S Apr19 0:00 [kintegrityd/0]
root 31 0.0 0.0 0 0 ? S Apr19 0:00 [kintegrityd/1]
root 32 0.0 0.0 0 0 ? S Apr19 0:00 [kintegrityd/2]
root 33 0.0 0.0 0 0 ? S Apr19 0:00 [kintegrityd/3]
root 34 0.0 0.0 0 0 ? S Apr19 0:10 [kblockd/0]
root 35 0.0 0.0 0 0 ? S Apr19 0:11 [kblockd/1]
root 36 0.0 0.0 0 0 ? S Apr19 0:00 [kblockd/2]
root 37 0.0 0.0 0 0 ? S Apr19 0:00 [kblockd/3]
root 38 0.0 0.0 0 0 ? S Apr19 0:00 [kacpid]
root 39 0.0 0.0 0 0 ? S Apr19 0:00 [kacpi_notify]
root 40 0.0 0.0 0 0 ? S Apr19 0:00 [kacpi_hotplug]
root 41 0.0 0.0 0 0 ? S Apr19 0:00 [ata_aux]
root 42 0.0 0.0 0 0 ? S Apr19 0:00 [ata_sff/0]
root 43 0.0 0.0 0 0 ? S Apr19 0:00 [ata_sff/1]
root 44 0.0 0.0 0 0 ? S Apr19 0:00 [ata_sff/2]
root 45 0.0 0.0 0 0 ? S Apr19 0:00 [ata_sff/3]
root 46 0.0 0.0 0 0 ? S Apr19 0:00 [ksuspend_usbd]
root 47 0.0 0.0 0 0 ? S Apr19 0:00 [khubd]
root 48 0.0 0.0 0 0 ? S Apr19 0:00 [kseriod]
root 49 0.0 0.0 0 0 ? S Apr19 0:00 [md/0]
root 50 0.0 0.0 0 0 ? S Apr19 0:00 [md/1]
root 51 0.0 0.0 0 0 ? S Apr19 0:00 [md/2]
root 52 0.0 0.0 0 0 ? S Apr19 0:00 [md/3]
root 53 0.0 0.0 0 0 ? S Apr19 0:00 [md_misc/0]
root 54 0.0 0.0 0 0 ? S Apr19 0:00 [md_misc/1]
root 55 0.0 0.0 0 0 ? S Apr19 0:00 [md_misc/2]
root 56 0.0 0.0 0 0 ? S Apr19 0:00 [md_misc/3]
root 57 0.0 0.0 0 0 ? S Apr19 0:00 [linkwatch]
root 58 0.0 0.0 0 0 ? S Apr19 0:00 [khungtaskd]
root 59 0.0 0.0 0 0 ? S Apr19 0:34 [kswapd0]
root 60 0.0 0.0 0 0 ? SN Apr19 0:00 [ksmd]
root 61 0.0 0.0 0 0 ? SN Apr19 0:17 [khugepaged]
root 62 0.0 0.0 0 0 ? S Apr19 0:00 [aio/0]
root 63 0.0 0.0 0 0 ? S Apr19 0:00 [aio/1]
root 64 0.0 0.0 0 0 ? S Apr19 0:00 [aio/2]
root 65 0.0 0.0 0 0 ? S Apr19 0:00 [aio/3]
root 66 0.0 0.0 0 0 ? S Apr19 0:00 [crypto/0]
root 67 0.0 0.0 0 0 ? S Apr19 0:00 [crypto/1]
root 68 0.0 0.0 0 0 ? S Apr19 0:00 [crypto/2]
root 69 0.0 0.0 0 0 ? S Apr19 0:00 [crypto/3]
root 74 0.0 0.0 0 0 ? S Apr19 0:00 [kthrotld/0]
root 75 0.0 0.0 0 0 ? S Apr19 0:00 [kthrotld/1]
root 76 0.0 0.0 0 0 ? S Apr19 0:00 [kthrotld/2]
root 77 0.0 0.0 0 0 ? S Apr19 0:00 [kthrotld/3]
root 78 0.1 0.0 0 0 ? SN Apr19 17:36 [kipmi0]
root 80 0.0 0.0 0 0 ? S Apr19 0:00 [kpsmoused]
root 81 0.0 0.0 0 0 ? S Apr19 0:00 [usbhid_resumer]
root 112 0.0 0.0 0 0 ? S Apr19 0:00 [kstriped]
root 199 0.0 0.0 0 0 ? S Apr19 0:00 [scsi_eh_0]
root 200 0.0 0.0 0 0 ? S Apr19 0:00 [scsi_eh_1]
root 201 0.0 0.0 0 0 ? S Apr19 0:00 [scsi_eh_2]
root 202 0.0 0.0 0 0 ? S Apr19 0:00 [scsi_eh_3]
root 203 0.0 0.0 0 0 ? S Apr19 0:00 [scsi_eh_4]
root 204 0.0 0.0 0 0 ? S Apr19 0:00 [scsi_eh_5]
root 368 0.0 0.0 0 0 ? S Apr19 0:02 [kdmflush]
root 370 0.0 0.0 0 0 ? S Apr19 0:00 [kdmflush]
root 393 0.0 0.0 0 0 ? S Apr19 0:16 [jbd2/dm-0-8]
root 394 0.0 0.0 0 0 ? S Apr19 0:00 [ext4-dio-unwrit]
root 484 0.0 0.0 11016 408 ? S<s Apr19 0:00 /sbin/udevd -d
root 953 0.0 0.0 0 0 ? S Apr19 0:00 [kdmflush]
root 986 0.0 0.8 259572 69392 ? S Apr25 0:37 spamd child
root 987 0.0 0.7 246476 56332 ? S Apr25 0:04 spamd child
root 998 0.0 0.0 0 0 ? S Apr19 0:00 [jbd2/sda1-8]
root 999 0.0 0.0 0 0 ? S Apr19 0:00 [ext4-dio-unwrit]
root 1000 0.0 0.0 0 0 ? S Apr19 0:37 [jbd2/dm-2-8]
root 1001 0.0 0.0 0 0 ? S Apr19 0:00 [ext4-dio-unwrit]
root 1081 0.0 0.0 0 0 ? S Apr19 0:03 [kauditd]
root 1275 0.0 0.0 93196 780 ? S<sl Apr19 0:11 auditd
root 1300 0.0 0.0 249480 3584 ? Sl Apr19 0:22 /sbin/rsyslogd -i /var/run/syslogd.pid -c 5
root 1322 0.0 0.0 0 0 ? S Apr19 0:07 [flush-253:0]
root 1325 0.0 0.0 0 0 ? S Apr19 2:26 [kondemand/0]
root 1326 0.0 0.0 0 0 ? S Apr19 1:36 [kondemand/1]
root 1327 0.0 0.0 0 0 ? S Apr19 0:49 [kondemand/2]
root 1328 0.0 0.0 0 0 ? S Apr19 0:25 [kondemand/3]
root 1349 0.0 0.0 10892 552 ? Ss Apr19 0:47 irqbalance --pid=/var/run/irqbalance.pid
rpc 1363 0.0 0.0 18976 700 ? Ss Apr19 0:00 rpcbind
dbus 1378 0.0 0.0 21812 1420 ? Ss Apr19 0:00 dbus-daemon --system
root 1388 0.0 0.0 83176 4700 ? Ss Apr19 0:01 NetworkManager --pid-file=/var/run/NetworkManager/NetworkManager.pid
root 1395 0.0 0.0 58064 2184 ? S Apr19 0:00 /usr/sbin/modem-manager
rpcuser 1409 0.0 0.0 23348 1332 ? Ss Apr19 0:00 rpc.statd
root 1479 0.0 0.0 44956 988 ? Ss Apr19 0:00 /usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -B -u
root 1506 0.0 0.0 189332 2924 ? Ss Apr19 0:00 cupsd -C /etc/cups/cupsd.conf
root 1517 0.0 0.0 4080 644 ? Ss Apr19 0:00 /usr/sbin/acpid
68 1526 0.0 0.0 38348 2752 ? Ssl Apr19 0:02 hald
root 1527 0.0 0.0 20328 1156 ? S Apr19 0:00 hald-runner
root 1564 0.0 0.0 22448 1060 ? S Apr19 0:00 hald-addon-input: Listening on /dev/input/event0
68 1567 0.0 0.0 17936 1016 ? S Apr19 0:00 hald-addon-acpi: listening on acpid socket /var/run/acpid.socket
root 1587 0.0 0.0 388780 1644 ? Ssl Apr19 0:03 automount --pid-file /var/run/autofs.pid
root 1604 0.0 0.0 197624 5028 ? S Apr19 1:53 /usr/sbin/snmpd -LS0-6d -Lf /dev/null -p /var/run/snmpd.pid
root 1612 0.0 0.0 18516 1264 ? Ss Apr19 0:32 /usr/sbin/dovecot
ntp 1632 0.0 0.0 30720 2048 ? Ss Apr19 0:00 ntpd -u ntp:ntp -p /var/run/ntpd.pid -g
root 1643 0.0 0.0 108336 1484 ? S Apr19 0:00 /bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/
dovecot 1647 0.0 0.0 16352 1256 ? S Apr19 0:13 dovecot/anvil [39 connections]
root 1648 0.0 0.0 16484 1328 ? S Apr19 0:17 dovecot/log
root 1691 0.0 0.0 19644 2304 ? S Apr19 0:47 dovecot/config
root 1692 0.0 0.0 21940 2396 ? S Apr19 0:51 dovecot/auth [0 wait, 0 passdb, 0 userdb]
mysql 1771 0.0 1.3 1414340 106652 ? Sl Apr19 5:01 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr
root 1803 0.0 0.0 21136 3048 ? Ss Apr19 0:22 /usr/local/directadmin/da-popb4smtp
mail 1823 0.0 0.0 59336 1372 ? Ss Apr19 0:00 /usr/sbin/exim -bd -q15m -oP /var/run/exim.pid
root 1828 0.0 0.6 240052 49772 ? Ss Apr19 1:08 /usr/bin/spamd -d -c -m 5
root 1851 0.0 0.0 110320 936 ? Ss Apr19 0:00 /usr/sbin/abrtd
root 1867 0.0 0.0 117296 1280 ? Ss Apr19 0:05 crond
root 1878 0.0 0.0 21540 556 ? Ss Apr19 0:00 /usr/sbin/atd
root 1890 0.0 0.0 62320 920 ? Ss Apr19 0:00 /usr/sbin/certmonger -S -p /var/run/certmonger.pid
root 1898 0.0 0.0 133936 2072 ? Ssl Apr19 0:00 /usr/sbin/gdm-binary -nodaemon
root 1903 0.0 0.0 4064 524 tty2 Ss+ Apr19 0:00 /sbin/mingetty /dev/tty2
root 1905 0.0 0.0 4064 524 tty3 Ss+ Apr19 0:00 /sbin/mingetty /dev/tty3
root 1907 0.0 0.0 4064 524 tty4 Ss+ Apr19 0:00 /sbin/mingetty /dev/tty4
root 1909 0.0 0.0 4064 528 tty5 Ss+ Apr19 0:00 /sbin/mingetty /dev/tty5
root 1911 0.0 0.0 4064 524 tty6 Ss+ Apr19 0:00 /sbin/mingetty /dev/tty6
root 1914 0.0 0.0 11012 404 ? S< Apr19 0:00 /sbin/udevd -d
root 1915 0.0 0.0 11012 412 ? S< Apr19 0:00 /sbin/udevd -d
root 1930 0.0 0.0 167608 3280 ? Sl Apr19 0:00 /usr/libexec/gdm-simple-slave --display-id /org/gnome/DisplayManager/Displ
root 1933 0.0 0.3 160360 24704 tty1 Ss+ Apr19 0:20 /usr/bin/Xorg :0 -nr -verbose -audit 4 -auth /var/run/gdm/auth-for-gdm-2Ke
root 1960 0.0 0.0 2084848 3588 ? Sl Apr19 0:00 /usr/sbin/console-kit-daemon --no-daemon
gdm 2030 0.0 0.0 20040 632 ? S Apr19 0:00 /usr/bin/dbus-launch --exit-with-session
gdm 2031 0.0 0.0 21536 872 ? Ss Apr19 0:00 /bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session
gdm 2032 0.0 0.1 269172 8448 ? Ssl Apr19 0:00 /usr/bin/gnome-session --autostart=/usr/share/gdm/autostart/LoginWindow/
root 2035 0.0 0.0 49776 2864 ? S Apr19 0:00 /usr/libexec/devkit-power-daemon
gdm 2055 0.0 0.0 120276 5720 ? S Apr19 0:02 /usr/libexec/at-spi-registryd
gdm 2060 0.0 0.1 349108 12300 ? Ssl Apr19 0:09 /usr/libexec/gnome-settings-daemon --gconf-prefix=/apps/gdm/simple-greeter
gdm 2062 0.0 0.0 361536 3556 ? Ssl Apr19 0:00 /usr/libexec/bonobo-activation-server --ac-activate --ior-output-fd=12
gdm 2069 0.0 0.0 135100 2092 ? S Apr19 0:00 /usr/libexec/gvfsd
gdm 2070 0.0 0.1 287180 10124 ? S Apr19 0:04 metacity
gdm 2072 0.0 0.1 248304 8060 ? S Apr19 0:00 /usr/libexec/polkit-gnome-authentication-agent-1
gdm 2073 0.0 0.1 273732 9156 ? S Apr19 0:07 gnome-power-manager
root 2075 0.0 0.0 52532 3956 ? S Apr19 0:00 /usr/libexec/polkit-1/polkitd
gdm 2077 0.0 0.1 382604 14316 ? S Apr19 0:15 /usr/libexec/gdm-simple-greeter
gdm 2086 0.0 0.0 346200 2604 ? S<sl Apr19 0:00 /usr/bin/pulseaudio --start --log-target=syslog
rtkit 2088 0.0 0.0 168456 1156 ? SNl Apr19 0:07 /usr/libexec/rtkit-daemon
root 2093 0.0 0.0 142028 2260 ? S Apr19 0:00 pam: gdm-password
named 2128 0.0 0.2 392504 22972 ? Ssl Apr19 0:04 /usr/sbin/named -u named
ftp 2152 0.0 0.0 149300 2956 ? SLs Apr19 0:02 proftpd: (accepting connections)
dovecot 11284 0.0 0.0 45264 3164 ? S Apr27 0:00 dovecot/pop3-login
dovecot 11778 0.0 0.0 45264 3160 ? S Apr27 0:00 dovecot/pop3-login
dovecot 12045 0.0 0.0 45268 3160 ? S Apr27 0:00 dovecot/imap-login
dovecot 12165 0.0 0.0 45268 3164 ? S Apr27 0:00 dovecot/imap-login
root 12196 0.0 0.0 150184 2104 ? S Apr22 0:00 vncserver-x11: [host resolver]
dovecot 12648 0.0 0.0 45268 3160 ? S Apr27 0:00 dovecot/imap-login
dovecot 14084 0.0 0.0 45268 3164 ? S Apr27 0:00 dovecot/imap-login
dovecot 14086 0.0 0.0 45268 3164 ? S Apr27 0:00 dovecot/imap-login
dovecot 14610 0.0 0.0 45264 3164 ? S Apr27 0:00 dovecot/pop3-login
dovecot 14851 0.0 0.0 45268 3164 ? S Apr27 0:00 dovecot/imap-login
root 15128 0.0 0.0 114960 580 ? S Apr21 0:14 vncserver-x11-serviced
root 15132 0.0 0.0 146224 5064 ? S Apr21 0:00 /usr/bin/vncserver-x11-core -service
dovecot 16028 0.0 0.0 45264 3164 ? S Apr27 0:00 dovecot/pop3-login
onecool 16307 0.0 0.0 22104 2480 ? S Apr27 0:00 dovecot/imap [saifon@onecool.co.th 58.8.24.228]
root 16339 0.0 0.0 66608 1180 ? Ss Apr21 0:00 /usr/sbin/sshd
dovecot 16459 0.0 0.0 45264 3160 ? S Apr27 0:00 dovecot/pop3-login
dovecot 16698 0.0 0.0 45264 3164 ? S Apr27 0:00 dovecot/pop3-login
dovecot 16763 0.0 0.0 45264 3160 ? S Apr27 0:00 dovecot/pop3-login
root 17126 0.0 0.1 207060 9684 ? Ss 00:11 0:00 /usr/sbin/httpd -k start -DSSL
apache 17129 0.0 0.0 207448 7248 ? S 00:11 0:00 /usr/sbin/httpd -k start -DSSL
apache 17130 0.0 0.0 207432 7288 ? S 00:11 0:00 /usr/sbin/httpd -k start -DSSL
apache 17131 0.0 0.0 207584 7008 ? S 00:11 0:00 /usr/sbin/httpd -k start -DSSL
apache 17132 0.0 0.0 207628 7464 ? S 00:11 0:00 /usr/sbin/httpd -k start -DSSL
apache 17133 0.0 0.0 207448 6944 ? S 00:11 0:00 /usr/sbin/httpd -k start -DSSL
apache 17208 0.0 0.0 207200 7036 ? S 00:19 0:00 /usr/sbin/httpd -k start -DSSL
dovecot 17327 0.0 0.0 45264 3164 ? S 00:31 0:00 dovecot/pop3-login
dovecot 17363 0.0 0.0 45268 3168 ? S 00:35 0:00 dovecot/imap-login
dovecot 18748 0.0 0.0 45264 3160 ? S 03:05 0:00 dovecot/pop3-login
nobody 19502 0.0 0.0 54960 1692 ? Ss 04:01 0:00 /usr/local/directadmin/directadmin d
onecool 20083 0.0 0.0 22108 2340 ? S 05:05 0:00 dovecot/imap [copen@onecool.co.th 185.30.176.187]
dovecot 21374 0.0 0.0 45268 3164 ? S 07:05 0:00 dovecot/imap-login
dovecot 21505 0.0 0.0 45268 3164 ? S 07:20 0:00 dovecot/imap-login
onecool 21547 0.0 0.0 22296 2736 ? S 07:24 0:00 dovecot/imap [pomp@onecool.co.th 171.6.169.51]
dovecot 21861 0.0 0.0 45264 3160 ? S 07:57 0:00 dovecot/pop3-login
onecool 22136 0.0 0.0 22176 2384 ? S 08:22 0:00 dovecot/imap [thaniyah@onecool.co.th 49.230.181.135]
dovecot 22141 0.0 0.0 45264 3164 ? S 08:23 0:00 dovecot/pop3-login
dovecot 22143 0.0 0.0 45264 3160 ? S 08:23 0:00 dovecot/pop3-login
onecool 22161 0.0 0.0 22088 2368 ? S 08:24 0:00 dovecot/imap [kamontip@onecool.co.th 49.230.125.227]
onecool 22184 0.0 0.0 22088 2304 ? S 08:25 0:00 dovecot/imap [kamontip@onecool.co.th 49.230.125.227]
onecool 22203 0.0 0.0 22176 2356 ? S 08:28 0:00 dovecot/imap [thaniyah@onecool.co.th 49.230.181.135]
dovecot 22227 0.0 0.0 45264 3160 ? S 08:30 0:00 dovecot/pop3-login
dovecot 22233 0.0 0.0 45404 3508 ? S 08:30 0:00 dovecot/imap-login [1 connections (1 TLS)]
onecool 22242 0.0 0.0 22096 2316 ? S 08:31 0:00 dovecot/imap [jakkrit.boonma@onecool.co.th 49.230.143.189]
dovecot 22249 0.0 0.0 45404 3504 ? S 08:32 0:00 dovecot/imap-login [1 connections (1 TLS)]
onecool 22250 0.0 0.0 22088 2368 ? S 08:32 0:00 dovecot/imap [kamontip@onecool.co.th 49.230.125.227]
onecool 22260 0.0 0.0 22132 2304 ? S 08:33 0:00 dovecot/imap [fadz@onecool.co.th 171.99.134.247]
onecool 22268 0.0 0.0 22176 2356 ? S 08:34 0:00 dovecot/imap [thaniyah@onecool.co.th 49.230.181.135]
onecool 22269 0.0 0.0 21884 1968 ? S 08:34 0:00 dovecot/imap [thaniyah@onecool.co.th 49.230.181.135]
root 22296 0.0 0.0 0 0 ? S 08:36 0:00 [flush-253:2]
onecool 22322 0.0 0.0 22096 2312 ? S 08:38 0:00 dovecot/imap [jakkrit.boonma@onecool.co.th 49.230.143.189]
dovecot 22323 0.0 0.0 45404 3508 ? S 08:38 0:00 dovecot/imap-login [1 connections (1 TLS)]
onecool 22326 0.0 0.0 22104 2488 ? S 08:38 0:00 dovecot/imap [jakkrit.boonma@onecool.co.th 49.230.143.189]
onecool 22332 0.0 0.0 22176 2388 ? S 08:39 0:00 dovecot/imap [thaniyah@onecool.co.th 192.168.99.254]
onecool 22333 0.0 0.0 22188 2488 ? S 08:39 0:00 dovecot/imap [thaniyah@onecool.co.th 192.168.99.254]
dovecot 22358 0.0 0.0 45264 3164 ? S 08:40 0:00 dovecot/pop3-login
onecool 22367 0.0 0.0 22088 2300 ? S 08:41 0:00 dovecot/imap [kamontip@onecool.co.th 49.230.117.29]
dovecot 22377 0.0 0.0 45268 3164 ? S 08:41 0:00 dovecot/imap-login
onecool 22388 0.0 0.0 24508 3084 ? S 08:42 0:00 dovecot/imap [kamontip@onecool.co.th 49.230.117.29]
dovecot 22395 0.0 0.0 45268 3164 ? S 08:42 0:00 dovecot/imap-login
dovecot 22400 0.0 0.0 45268 3164 ? S 08:42 0:00 dovecot/imap-login
onecool 22401 0.0 0.0 22124 2260 ? S 08:42 0:00 dovecot/imap [copen@onecool.co.th 58.8.41.231 IDLE]
dovecot 22402 0.0 0.0 45268 3164 ? S 08:42 0:00 dovecot/imap-login
onecool 22403 0.0 0.0 21792 1896 ? S 08:42 0:00 dovecot/imap [copen@onecool.co.th 58.8.41.231]
onecool 22406 0.0 0.0 22116 2276 ? S 08:42 0:00 dovecot/imap [copen@onecool.co.th 58.8.41.231]
onecool 22411 0.0 0.0 21884 1968 ? S 08:43 0:00 dovecot/imap [pomp@onecool.co.th 171.6.169.51]
apache 22434 0.0 0.0 207060 5872 ? S 08:45 0:00 /usr/sbin/httpd -k start -DSSL
onecool 22440 0.0 0.0 22100 2324 ? S 08:45 0:00 dovecot/imap [fadz@onecool.co.th 49.230.188.212]
dovecot 22443 0.0 0.0 45400 3488 ? S 08:46 0:00 dovecot/pop3-login [1 connections (1 TLS)]
dovecot 22449 0.0 0.0 45268 3164 ? S 08:47 0:00 dovecot/imap-login
onecool 22451 0.0 0.0 22080 2280 ? S 08:47 0:00 dovecot/imap [pomp@onecool.co.th 171.6.169.51]
onecool 22460 0.0 0.0 22120 2288 ? S 08:48 0:00 dovecot/imap [saifon@onecool.co.th 58.8.24.228]
nobody 22493 0.0 0.0 54960 852 ? S 08:48 0:00 /usr/local/directadmin/directadmin d
nobody 22494 0.0 0.0 54960 852 ? S 08:48 0:00 /usr/local/directadmin/directadmin d
nobody 22495 0.0 0.0 54960 852 ? S 08:48 0:00 /usr/local/directadmin/directadmin d
dovecot 22496 0.0 0.0 45264 3160 ? S 08:48 0:00 dovecot/pop3-login
nobody 22504 0.0 0.0 54960 852 ? S 08:49 0:00 /usr/local/directadmin/directadmin d
nobody 22506 0.0 0.0 54960 852 ? S 08:49 0:00 /usr/local/directadmin/directadmin d
dovecot 22507 0.0 0.0 45268 3160 ? S 08:49 0:00 dovecot/imap-login
onecool 22508 0.0 0.0 22120 2288 ? S 08:49 0:00 dovecot/imap [saifon@onecool.co.th 1.46.194.239]
root 22524 0.0 0.0 22460 1504 ? S 08:50 0:00 dovecot/ssl-params
onecool 22525 0.0 0.0 21980 2184 ? S 08:50 0:00 dovecot/pop3 [sarawut@onecool.co.th 49.230.107.143]
root 22529 0.0 0.0 163748 1976 pts/0 S 08:50 0:00 su -
root 22530 0.0 0.0 108340 1804 pts/0 S 08:50 0:00 -bash
dovecot 22557 0.0 0.0 45400 3488 ? S 08:52 0:00 dovecot/pop3-login [1 connections (1 TLS)]
root 22558 0.0 0.0 23496 1776 ? S 08:52 0:00 dovecot/auth worker: idling
onecool 22562 0.0 0.0 21996 2280 ? S 08:52 0:00 dovecot/pop3 [pomp@onecool.co.th 171.6.169.51]
dovecot 22566 0.0 0.0 45400 3488 ? S 08:52 0:00 dovecot/pop3-login [1 connections (1 TLS)]
dovecot 22567 0.0 0.0 45268 3164 ? S 08:52 0:00 dovecot/imap-login
onecool 22571 0.0 0.0 22088 2372 ? S 08:53 0:00 dovecot/imap [kamontip@onecool.co.th 49.230.117.29]
dovecot 22574 0.0 0.0 45264 3160 ? S 08:53 0:00 dovecot/pop3-login
onecool 22575 0.0 0.0 22408 2640 ? S 08:53 0:00 dovecot/pop3 [kamontip@onecool.co.th 49.230.117.29]
root 22577 0.0 0.0 110244 1144 pts/0 R+ 08:53 0:00 ps aux
root 24368 0.0 0.0 100368 4408 ? Ss Apr25 0:00 sshd: nuengdunk [priv]
500 24370 0.0 0.0 100368 2016 ? S Apr25 0:01 sshd: nuengdunk@pts/0
500 24371 0.0 0.0 108340 1776 pts/0 Ss Apr25 0:00 -bash
root 24394 0.0 0.0 163880 2824 pts/0 S Apr25 0:00 su root
root 24397 0.0 0.0 108340 1812 pts/0 S Apr25 0:00 bash

42

iptables -V

iptables v1.4.7

iptables -L -t nat

Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp – anywhere 192.168.x.x multiport dports http,https to:110.170.x.x

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

43

]# cat /etc/crontab
SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

For details see man 4 crontabs

Example of job definition:

.---------------- minute (0 - 59)

| .------------- hour (0 - 23)

| | .---------- day of month (1 - 31)

| | | .------- month (1 - 12) OR jan,feb,mar,apr …

| | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat

| | | | |

* * * * * user-name command to be executed

44

cat /etc/cron.d/*

SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/
01 * * * * root run-parts /etc/cron.hourly

          • root /usr/local/directadmin/dataskq
            2 0-23/6 * * * root echo ‘action=vacation&value=all’ >> /usr/local/directadmin/data/task.queue;
            #5 5 * * 0 root /sbin/quotaoff -a; /sbin/quotacheck -augm; /sbin/quotaon -a;
            10 0 * * * root echo ‘action=tally&value=all’ >> /usr/local/directadmin/data/task.queue
            20 4 1 * * root echo ‘action=reset&value=all’ >> /usr/local/directadmin/data/task.queue
            0 4 * * * root echo ‘action=check&value=license’ >> /usr/local/directadmin/data/task.queue
            40 5,11,17,23 * * * root /usr/local/installatron/lib/cron.updater.sh
            */5 * * * * root LANG=C LC_ALL=C /usr/bin/mrtg /etc/mrtg/mrtg.cfg --lock-file /var/lock/mrtg/mrtg_l --confcache-file /var/lib/mrtg/mrtg.ok > /dev/null 2>&1

Run system wide raid-check once a week on Sunday at 1am by default

0 1 * * Sun root /usr/sbin/raid-check

Run system activity accounting tool every 10 minutes

*/10 * * * * root /usr/lib64/sa/sa1 1 1

0 * * * * root /usr/lib64/sa/sa1 600 6 &

Generate a daily summary of process accounting at 23:53

53 23 * * * root /usr/lib64/sa/sa2 -A

45

ดูอย่างละเอียดแล้ว ไฟล์ /etc/init.d/iptables มีแค่นั้นจริงๆ หรอครับ แต่ก็ไม่เป็นไรครับ ถ้าไฟล์ที่มันเป็น default จริงๆ จะไม่เป็นแบบนั้นครับ (ไฟล์ดังกล่าวนี้ถูกปรับแต่งมาก่อนแล้วครับ)

แก้ไขเพื่อไม่ให้กระทบกับ config เดิมให้ใส่ config

NAT

$IPTABLES -t nat -A PREROUTING -d 192.168.x.x -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 110.170.x.x

ไว้ล่างบรรทัด #$IPTABLES -A POSTROUTING -t nat -o $EXTERNALIF -j MASQUERADE

จะได้แบบนี้ครับ


# cat /etc/init.d/iptables

$IPTABLES -A INPUT -p all -j DROP


$IPTABLES -A FORWARD -p tcp -j REJECT --reject-with tcp-reset
$IPTABLES -A FORWARD -p all -j DROP


#OUTPUT packets:
#Drop irc packets
$IPTABLES -A OUTPUT -p tcp --destination-port 6660:6669 -j DROP
$IPTABLES -A OUTPUT -p tcp --destination-port 7000 -j DROP


#SMTP output, only allow mail to send remotely.
$IPTABLES -A OUTPUT -m owner --uid-owner mail -p tcp --dport 25 -j ACCEPT
$IPTABLES -A OUTPUT -m owner --uid-owner root -p tcp --dport 25 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -d 127.0.0.1 --dport 25 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --dport 25 -j REJECT


# Open VNC for USER1
$IPTABLES -A INPUT -m state --state NEW -m tcp -p tcp --dport 5800  -j ACCEPT
$IPTABLES -A INPUT -m state --state NEW -m tcp -p tcp --dport 5900  -j ACCEPT
$IPTABLES -A INPUT -m state --state NEW -m tcp -p tcp --dport 6000  -j ACCEPT


#Accept it anyway if it's only output
$IPTABLES -A OUTPUT -j ACCEPT


#Masquerade internal connections going out.
#$IPTABLES -A POSTROUTING -t nat -o $EXTERNALIF -j MASQUERADE

# NAT
$IPTABLES -t nat -A PREROUTING -d 192.168.x.x -p tcp -m multiport --dports 80,443 -j DNAT --to-destination 110.170.x.x

exit 0

restart iptables ใหม่ก็จบละครับ

46

ไฟล์ /etc/init.d/iptables ไม่ควรไปยุ่งมันนะครับ มันเป็น startup script ไม่ใช่ config rule

rule จริงๆ ควรจะอยู่ที่ /etc/sysconfig/iptables โน่น (สั่งบันทึกการทำงานได้ด้วยคำสั่ง service iptables save <-- กรณีไม่ได้ไปแก้ /etc/init.d/iptables)

นี่แสดงว่าแก้ผิดที่มาโดยตลอดเลย ลองสั่ง yum reinstall iptables ดูนะครับ ไฟล์ /etc/init.d/iptables ควรจะกลับมาเป็น script หน้าตาประมาณนี้

#!/bin/sh#
# iptables      Start iptables firewall
#
# chkconfig: 2345 08 92
# description:  Starts, stops and saves iptables firewall
#
# config: /etc/sysconfig/iptables
# config: /etc/sysconfig/iptables-config


# Source function library.
. /etc/init.d/functions


IPTABLES=iptables
IPTABLES_DATA=/etc/sysconfig/$IPTABLES
IPTABLES_CONFIG=/etc/sysconfig/${IPTABLES}-config
IPV=${IPTABLES%tables} # ip for ipv4 | ip6 for ipv6
PROC_IPTABLES_NAMES=/proc/net/${IPV}_tables_names
VAR_SUBSYS_IPTABLES=/var/lock/subsys/$IPTABLES


if [ ! -x /sbin/$IPTABLES ]; then
    echo -n $"/sbin/$IPTABLES does not exist."; warning; echo
    exit 0
fi


if lsmod 2>/dev/null | grep -q ipchains ; then
    echo -n $"ipchains and $IPTABLES can not be used together."; warning; echo
    exit 1
fi


# Old or new modutils
/sbin/modprobe --version 2>&1 | grep -q module-init-tools \
    && NEW_MODUTILS=1 \
    || NEW_MODUTILS=0


# Default firewall configuration:
IPTABLES_MODULES=""
IPTABLES_MODULES_UNLOAD="yes"
IPTABLES_SAVE_ON_STOP="no"
IPTABLES_SAVE_ON_RESTART="no"
IPTABLES_SAVE_COUNTER="no"
IPTABLES_STATUS_NUMERIC="yes"
IPTABLES_SYSCTL_LOAD_LIST=""


# Load firewall configuration.
[ -f "$IPTABLES_CONFIG" ] && . "$IPTABLES_CONFIG"


rmmod_r() {
    # Unload module with all referring modules.
    # At first all referring modules will be unloaded, then the module itself.
    local mod=$1
    local ret=0
    local ref=


    # Get referring modules.
    # New modutils have another output format.
    [ $NEW_MODUTILS = 1 ] \
        && ref=`lsmod | awk "/^${mod}/ { print \\\$4; }" | tr ',' ' '` \
        || ref=`lsmod | grep ^${mod} | cut -d "[" -s -f 2 | cut -d "]" -s -f 1`


    # recursive call for all referring modules
    for i in $ref; do
        rmmod_r $i
        let ret+=$?;
    done


    # Unload module.
    # The extra test is for 2.6: The module might have autocleaned,
    # after all referring modules are unloaded.
    if grep -q "^${mod}" /proc/modules ; then
        modprobe -r $mod > /dev/null 2>&1
        let ret+=$?;
    fi


    return $ret
}


flush_n_delete() {
    # Flush firewall rules and delete chains.
    [ -e "$PROC_IPTABLES_NAMES" ] || return 1


    # Check if firewall is configured (has tables)
    tables=`cat $PROC_IPTABLES_NAMES 2&gt;/dev/null`
    [ -z "$tables" ] && return 1


    echo -n $"Flushing firewall rules: "
    ret=0
    # For all tables
    for i in $tables; do
        # Flush firewall rules.
        $IPTABLES -t $i -F;
        let ret+=$?;


        # Delete firewall chains.
        $IPTABLES -t $i -X;
        let ret+=$?;


        # Set counter to zero.
        $IPTABLES -t $i -Z;
        let ret+=$?;
    done


    [ $ret -eq 0 ] && success || failure
    echo
    return $ret
}


set_policy() {
    # Set policy for configured tables.
    policy=$1


    # Check if iptable module is loaded
    [ ! -e "$PROC_IPTABLES_NAMES" ] && return 1


    # Check if firewall is configured (has tables)
    tables=`cat $PROC_IPTABLES_NAMES 2&gt;/dev/null`
    [ -z "$tables" ] && return 1


    echo -n $"Setting chains to policy $policy: "
    ret=0
    for i in $tables; do
        echo -n "$i "
        case "$i" in
            raw)
                $IPTABLES -t raw -P PREROUTING $policy \
                    && $IPTABLES -t raw -P OUTPUT $policy \
                    || let ret+=1
                ;;
            filter)
                $IPTABLES -t filter -P INPUT $policy \
                    && $IPTABLES -t filter -P OUTPUT $policy \
                    && $IPTABLES -t filter -P FORWARD $policy \
                    || let ret+=1
                ;;
            nat)
                $IPTABLES -t nat -P PREROUTING $policy \
                    && $IPTABLES -t nat -P POSTROUTING $policy \
                    && $IPTABLES -t nat -P OUTPUT $policy \
                    || let ret+=1
                ;;
            mangle)
                $IPTABLES -t mangle -P PREROUTING $policy \
                    && $IPTABLES -t mangle -P POSTROUTING $policy \
                    && $IPTABLES -t mangle -P INPUT $policy \
                    && $IPTABLES -t mangle -P OUTPUT $policy \
                    && $IPTABLES -t mangle -P FORWARD $policy \
                    || let ret+=1
                ;;
            *)
                let ret+=1
                ;;
        esac
    done


    [ $ret -eq 0 ] && success || failure
    echo
    return $ret
}


load_sysctl() {
    # load matched sysctl values
    if [ -n "$IPTABLES_SYSCTL_LOAD_LIST" ]; then
        echo -n $"Loading sysctl settings: "
        ret=0
        for item in $IPTABLES_SYSCTL_LOAD_LIST; do
            fgrep $item /etc/sysctl.conf | sysctl -p - >/dev/null
            let ret+=$?;
        done
        [ $ret -eq 0 ] && success || failure
        echo
    fi
    return $ret
}


start() {
    # Do not start if there is no config file.
    [ -f "$IPTABLES_DATA" ] || return 1


    echo -n $"Applying $IPTABLES firewall rules: "


    OPT=
    [ "x$IPTABLES_SAVE_COUNTER" = "xyes" ] && OPT="-c"


    $IPTABLES-restore $OPT $IPTABLES_DATA
    if [ $? -eq 0 ]; then
        success; echo
    else
        failure; echo; return 1
    fi


    # Load additional modules (helpers)
    if [ -n "$IPTABLES_MODULES" ]; then
        echo -n $"Loading additional $IPTABLES modules: "
        ret=0
        for mod in $IPTABLES_MODULES; do
            echo -n "$mod "
            modprobe $mod > /dev/null 2>&1
            let ret+=$?;
        done
        [ $ret -eq 0 ] && success || failure
        echo
    fi


    # Load sysctl settings
    load_sysctl


    touch $VAR_SUBSYS_IPTABLES
    return $ret
}


stop() {
    # Do not stop if iptables module is not loaded.
    [ -e "$PROC_IPTABLES_NAMES" ] || return 1


    flush_n_delete
    set_policy ACCEPT


    if [ "x$IPTABLES_MODULES_UNLOAD" = "xyes" ]; then
        echo -n $"Unloading $IPTABLES modules: "
        ret=0
        rmmod_r ${IPV}_tables
        let ret+=$?;
        rmmod_r ${IPV}_conntrack
        let ret+=$?;
        [ $ret -eq 0 ] && success || failure
        echo
    fi


    rm -f $VAR_SUBSYS_IPTABLES
    return $ret
}


save() {
    # Check if iptable module is loaded
    [ ! -e "$PROC_IPTABLES_NAMES" ] && return 1


    # Check if firewall is configured (has tables)
    tables=`cat $PROC_IPTABLES_NAMES 2&gt;/dev/null`
    [ -z "$tables" ] && return 1


    echo -n $"Saving firewall rules to $IPTABLES_DATA: "


    OPT=
    [ "x$IPTABLES_SAVE_COUNTER" = "xyes" ] && OPT="-c"


    ret=0
    TMP_FILE=`/bin/mktemp -q /tmp/$IPTABLES.XXXXXX` \
        && chmod 600 "$TMP_FILE" \
        && $IPTABLES-save $OPT > $TMP_FILE 2>/dev/null \
        && size=`stat -c '%s' $TMP_FILE` && [ $size -gt 0 ] \
        || ret=1
    if [ $ret -eq 0 ]; then
        if [ -e $IPTABLES_DATA ]; then
            cp -f $IPTABLES_DATA $IPTABLES_DATA.save \
                && chmod 600 $IPTABLES_DATA.save \
                || ret=1
        fi
        if [ $ret -eq 0 ]; then
            cp -f $TMP_FILE $IPTABLES_DATA \
                && chmod 600 $IPTABLES_DATA \
                || ret=1
        fi
    fi
    [ $ret -eq 0 ] && success || failure
    echo
    rm -f $TMP_FILE
    return $ret
}


status() {
    tables=`cat $PROC_IPTABLES_NAMES 2&gt;/dev/null`


    # Do not print status if lockfile is missing and iptables modules are not
    # loaded.
    # Check if iptable module is loaded
    if [ ! -f "$VAR_SUBSYS_IPTABLES" -a -z "$tables" ]; then
        echo $"Firewall is stopped."
        return 1
    fi


    # Check if firewall is configured (has tables)
    if [ ! -e "$PROC_IPTABLES_NAMES" ]; then
        echo $"Firewall is not configured. "
        return 1
    fi
    if [ -z "$tables" ]; then
        echo $"Firewall is not configured. "
        return 1
    fi


    NUM=
    [ "x$IPTABLES_STATUS_NUMERIC" = "xyes" ] && NUM="-n"
    VERBOSE=
    [ "x$IPTABLES_STATUS_VERBOSE" = "xyes" ] && VERBOSE="--verbose"
    COUNT=
    [ "x$IPTABLES_STATUS_LINENUMBERS" = "xyes" ] && COUNT="--line-numbers"


    for table in $tables; do
        echo $"Table: $table"
        $IPTABLES -t $table --list $NUM $VERBOSE $COUNT && echo
    done


    return 0
}


reload() {
    IPTABLES_MODULES_UNLOAD="no"
    restart
}


restart() {
    [ "x$IPTABLES_SAVE_ON_RESTART" = "xyes" ] && save
    stop
    start
}


case "$1" in
    start)
        stop
        start
        RETVAL=$?
        ;;
    stop)
        [ "x$IPTABLES_SAVE_ON_STOP" = "xyes" ] && save
        stop
        RETVAL=$?
        ;;
    reload)
        [ -e "$VAR_SUBSYS_IPTABLES" ] && reload
        ;;
    restart)
        restart
        RETVAL=$?
        ;;
    condrestart)
        [ -e "$VAR_SUBSYS_IPTABLES" ] && restart
        ;;
    status)
        status
        RETVAL=$?
        ;;
    panic)
        flush_n_delete
        set_policy DROP
        RETVAL=$?
        ;;
    save)
        save
        RETVAL=$?
        ;;
    *)
        echo $"Usage: $0 {start|stop|reload|restart|condrestart|status|panic|save}"
        exit 1
        ;;
esac


exit $RETVAL
47

รอดูผลต่อไปครับ

48

ได้แล้วครับ ขอบคุณมาก ๆ เลยครับ

49