Mailwatch - Greylist forbidden

[ajmind]

Wit hmy new eFa v5 box had had until yesterday a working grylisting tab in mailwatch. Now I am getting

Code: Select all

Forbidden

You don't have permission to access this resource.

Any idea how to find the root cause? SELinux have been set to permissive in order exclude this function a root cause.

[shawniverson]

First thing to check is permissions in /var/www/html/sgwi

Directories should be 755 and files 644. User/group can be root:root

[ajmind]

The permissions are set correct. Any other Idea?

[shawniverson]

What messages are you seeing in the logs under /var/log/php-fpm? Do you see any errors in the error.log or www-error.log?

[ajmind]

In www-error.log:

Code: Select all

[03-Jul-2024 14:50:00 Europe/Berlin] PHP Warning:  Directory /var/www/html/mailscanner/lib/htmlpurifier/standalone/HTMLPurifier/DefinitionCache/Serial                                                                                   izer not writable, please chmod to 777 in /var/www/html/mailscanner/lib/htmlpurifier/HTMLPurifier.standalone.php on line 15816

[shawniverson]

Yeah that error is not related to the problem.

Are all these files and symlinks present in /var/www/html/sgwi?

Code: Select all

-rw-r--r--. 1 root root 9360 Mar 13  2023 awl.php
lrwxrwxrwx. 1 root root   29 Mar 13  2023 checklogin.php -> ../mailscanner/checklogin.php
lrwxrwxrwx. 1 root root   23 Mar 13  2023 conf.php -> ../mailscanner/conf.php
-rw-r--r--. 1 root root 8588 Mar 13  2023 connect.php
lrwxrwxrwx. 1 root root   28 Mar 13  2023 functions.php -> ../mailscanner/functions.php
drwxr-xr-x. 2 root root   51 Mar 13  2023 images
drwxr-xr-x. 2 root root  146 Mar 13  2023 includes
-rw-r--r--. 1 root root 3590 Mar 13  2023 index.php
lrwxrwxrwx. 1 root root   33 Mar 13  2023 login.function.php -> ../mailscanner/login.function.php
lrwxrwxrwx. 1 root root   24 Mar 13  2023 login.php -> ../mailscanner/login.php
-rw-r--r--. 1 root root 1045 Mar 11  2017 main.css
-rw-r--r--. 1 root root 3740 Mar 13  2023 opt_in_out.php

Also what happens if you browse directly to it?

https://<yourefaserver>/sgwi

[ajmind]

I have tested an older snapshot of this install, before I had played arround with all these SElinux errors. It seems to be that my changes to overcome these problems have affected also the greylisting path.

With the older snapshot and all corrections made with SELinux the problem does not exist anymore.