I logged into Virtualmin today and saw a Virtual Server called 136326768332378. It was enabled for Mail only, but no Users added. No domain was added for it. I did not add this, dont know where it came from.
So I deleted it. After deleting it I got this message:-
Virtualmin has detected that 9 domains on your system are configured to allow symbolic links to other users' files. This can be exploited by a domain owner to access configurations files and private data in other virtual servers.
WARNING : Fixing this setting will break all virtual servers that have content or applications under symbolic links to other directories.
Although, I also ran yum update earlier, so maybe this error was due to package updates. The Virtual Server was there before package updates.
After fixing it, it said it needed to fix .htaccess issues. I did this and one of my sites sub-domains reported an internal server error 500.
The internal server error was because I have "Options +FollowSymlinks" in the htaccess
So all is OK now, but I was concerned with the virtual server I did not add.
Actually, I cant delete the virtual server, it states: Domain 136326768332378 is not valid!
So I changed the domain (which was blank) to some temp domain, then I could delete it.
hope this is not a result of a hack or something.
Howdy,
No, that's not a sign of a hack... it's an unfortunate Virtualmin bug that Jamie hasn't been able to track down :-)
While a few folks have reported it here over the years, it doesn't happen consistently, so he hasn't been able to determine what causes it.
If you've managed to delete it -- excellent! Hopefully it'll never happen again, as it's fairly rare :-)
-Eric