Home / user-254138

AAgg's questions

Martin Hope
AAgg
Asked: 2016-12-30 07:15:04 +0800 CST
  • 16

I have received domain abuse notice email from [email protected].

The mail asks to download a Word Document which I believe contains a virus.

Dear Domain Owner,

Our system has detected that your domain: example.com is being used for spamming and spreading malware recently.

You can download the detailed abuse report of your domain along with date/time of incidents. Click Here

We have also provided detailed instruction on how to delist your domain from our blacklisting.

Please download the report immediately and take proper action within 24 hours otherwise your domain will be suspended permanently.

There is also possibility of legal action depend on severity and persistence of your abuse case.

Three Simple Steps:

  1. Download your abuse report.
  2. Check your domain abuse incidents along with date and time.
  3. Take few simple steps for prevention and to avoid domain suspension.

Click Here to Download your Report

Please look into it and contact us.

I want to know if I have missed enabling/configuring something on the ISP side or did I leave some email address on my domain because of which these spammers have targeted me as well.

Are there ways to protect / configure my domain to avoid these emails?

spam domain-name abuse
Martin Hope
AAgg
Asked: 2016-06-23 01:56:39 +0800 CST
  • 1

Used to work

I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files:

sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -out /etc/nginx/ssl/server.csr

I answered all questions which this command asked. I then provided the .csr to name.com and successfully generated the server/intermediate certificates. I then followed the steps mentioned at https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&actp=CROSSLINK&id=SO17664 and installed this certificate at my nginx server. I was able to open the HTTPS version of my site as well.

PrivKey overwritten by mistake

Then, to try something else, I ran the command (sudo openssl req... ) again with different answers this time and generated a new server.key file. Unfortunately, I didn't save the first server.key file.

Post modification of nginx .conf file, when I tried to restart the server, I got the below error:

nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/nginx/ssl/server.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)

Seeing this error, I realized I have overwritten the server.key file. I tried to generate the key again with same answers I gave for the first time but still the key mismatch error is coming.

nginx is still running.

My nginx server is still running and I am able to access the HTTPS version of the site but my life is in trouble without the private key. I have gone through the below links but still stuck:

  1. https://stackoverflow.com/questions/26191463/ssl-error0b080074x509-certificate-routinesx509-check-private-keykey-values
  2. nginx ssl certificate issue key values mismatch

PrivKey modulus != PubKey modulus

I confirmed by running the below commands that my certificate (issued by name.com) and private keys don't match:

openssl x509 -noout -modulus -in server_orig.cert | openssl md5
openssl rsa -noout -modulus -in server.key | openssl md5

Any hope?

Is there anything which I can do to find out the private key since Nginx is still up and running? In case not, should I get the certificate re-issued by Geotrust?

Any help would be deeply appreciated.

certificate nginx ssl-certificate openssl private-key
Martin Hope
AAgg
Asked: 2014-12-26 10:24:09 +0800 CST
  • 2

I am having a Spring MVC app which uses Spring Security for login. I am using Apache Webserver as Proxy and Tomcat. Below is my /etc/apache2/sites-enabled/example.com.conf file:

ServerAdmin [email protected]
ServerName example.com
ServerAlias www.example.com
DocumentRoot /var/www/example.com/public_html

ProxyPreserveHost On
ProxyRequests off

ProxyPass /myapp/j_spring_security_check http://XX.YY.ZZ.WW:8080/myapp/j_spring_security_check
ProxyPassReverse /myapp/j_spring_security_check http://XX.YY.ZZ.WW:8080/myapp/j_spring_security_check

ProxyPass /myapp http://XX.YY.ZZ.WW:8080/myapp
ProxyPassReverse /myapp http://XX.YY.ZZ.WW:8080/myapp

My problem is now I have to access my site as:

www.example.com/myapp

where as I want to access it as

www.example.com

I tried playing with it but then the login didn't work properly. How should I set the ProxyPass & ProxyPassReverse for this?

apache-2.2