1. Forum
  3. Main Forum
  5. English Section
  7. CWP Control
  9. Safer Manual Update Workflow For CWP7 Servers After Recent Postfix And Roundcube
× Installation and guides about a great free, plesk and cpanel alternative project

Safer Manual Update Workflow For CWP7 Servers After Recent Postfix And Roundcube

Περισσότερα
6 Ημέρες 15 Ώρες πριν #341 από infogate
Safer Manual Update Workflow For CWP7 Servers After Recent Postfix And Roundcube δημιουργήθηκε από infogate
Hello everyone,After dealing with recent Postfix and Roundcube issues on CWP7, I no longer recommend blindly running full updates from the panel on production mail servers without checking what will be updated first.The recent problem I faced was caused after a CWP Roundcube update. Webmail login worked, sending mail worked, but the mailbox list crashed because Roundcube expected PHP Spoofchecker, while the internal CWP PHP did not have the required intl extension.Because of this, I prefer doing system updates manually through SSH, with checks before and after the update.This does not mean updates should be avoided forever. Security updates are important. But on a live hosting/mail server, updates should be done in a controlled way.My safer workflow is this:
  1. First check what updates are available
yum check-update
  1. Check specifically if the update touches mail, webmail, PHP, SSL, database, or CWP services
yum check-update | egrep -i "postfix|dovecot|mariadb|mysql|openssl|crypto|ssl|php|roundcube|cwp|cwpsrv|nginx|apache|httpd|clam|spam|amavis"
If the update includes services like Postfix, Dovecot, MariaDB, OpenSSL, PHP, cwpsrv, Roundcube, Apache, or Nginx, I prefer to schedule a maintenance window.
  1. Create a backup of important mail and CWP configuration before updating
BK="/root/pre-update-backup-$(date +%F_%H-%M-%S)"
mkdir -p "$BK"cp -a /etc/postfix "$BK/postfix"
cp -a /etc/dovecot "$BK/dovecot"
cp -a /usr/local/cwpsrv/var/services/roundcube "$BK/roundcube"
cp -a /usr/local/cwpsrv/conf "$BK/cwpsrv-conf"postconf -n > "$BK/postfix-postconf-n.txt"
postconf -M > "$BK/postfix-master-services.txt"
dovecot -n > "$BK/dovecot-n.txt" 2>&1echo "Backup saved in: $BK"
  1. Run the update manually from SSH
yum update -y
  1. Restart the important services after the update
systemctl restart cwpsrv
systemctl restart postfix
systemctl restart dovecot
systemctl restart mariadb
If a service does not exist on your server, systemd will tell you. For example, on some CWP servers php-fpm-cwp may not exist as a separate service.
  1. Check Postfix after the update
postfix check
postconf -M | egrep '^(smtp|smtps|submission|dovecot|vacation|spamassassin|retry|proxywrite|postlog)/'
  1. Check the mail services
systemctl status cwpsrv postfix dovecot mariadb --no-pager -l
  1. Check recent mail errors
tail -n 150 /var/log/maillog | egrep -i "fatal|error|warning|postfix|dovecot|sasl|auth|mysql|lookup|temporary"
  1. Check Roundcube errors
tail -n 100 /usr/local/cwpsrv/var/services/roundcube/logs/errors.log 2>/dev/null
  1. If you previously applied the Roundcube Spoofchecker workaround, check if the update overwrote it
grep -n "class_exists("Spoofchecker")" /usr/local/cwpsrv/var/services/roundcube/program/lib/Roundcube/rcube_spoofchecker.php || echo "Roundcube Spoofchecker patch missing"
  1. Check if CWP internal PHP has intl/Spoofchecker
for p in /usr/local/cwp/php*/bin/php /usr/bin/php; do
[ -x "$p" ] || continue
echo
echo "---- $p ----"
"$p" -v | head -1
"$p" -m | grep -i '^intl$' || echo "intl missing"
"$p" -r 'echo "Spoofchecker: "; var_export(class_exists("Spoofchecker")); echo PHP_EOL;' 2>/dev/null
done
  1. Check for deleted libraries still used by running services
After OpenSSL, MariaDB, PHP, or system library updates, services may continue using deleted old libraries until restarted.
lsof | egrep "DEL.*(libssl|libcrypto|libxml2|php|mysql|mariadb)" | head -80
If you see important services still using deleted libraries, restart the affected services or reboot during a safe maintenance window.
  1. Optional: create a quick post-update checker script
cat >/root/check-cwp-mail-after-update.sh <<'EOF'
#!/bin/bashecho "=== CWP Roundcube Spoofchecker patch ==="
grep -n "class_exists("Spoofchecker")" /usr/local/cwpsrv/var/services/roundcube/program/lib/Roundcube/rcube_spoofchecker.php 2>/dev/null || echo "PATCH MISSING"echo
echo "=== CWP internal PHP intl check ==="
for p in /usr/local/cwp/php*/bin/php /usr/bin/php; do
[ -x "$p" ] || continue
echo
echo "---- $p ----"
"$p" -v | head -1
"$p" -m | grep -i '^intl$' || echo "intl missing"
"$p" -r 'echo "Spoofchecker: "; var_export(class_exists("Spoofchecker")); echo PHP_EOL;' 2>/dev/null
doneecho
echo "=== Postfix check ==="
postfix checkecho
echo "=== Important mail services ==="
systemctl is-active cwpsrv postfix dovecot mariadbecho
echo "=== Recent Roundcube fatal errors ==="
tail -n 80 /usr/local/cwpsrv/var/services/roundcube/logs/errors.log 2>/dev/null | egrep -i "fatal|error|spoofchecker|intl" || echo "No recent matching Roundcube errors"echo
echo "=== Recent mail errors ==="
tail -n 150 /var/log/maillog 2>/dev/null | egrep -i "fatal|error|warning|postfix|dovecot|sasl|auth|mysql|lookup|temporary" | tail -80 || echo "No recent matching mail errors"
EOFchmod +x /root/check-cwp-mail-after-update.sh
Then after future updates, run:
/root/check-cwp-mail-after-update.sh
My recommendation:Do not ignore updates, especially security updates. But do not blindly click update all on a production mail server without knowing what will change.For CWP7/CWP7 Pro servers, I prefer:
  • Let CWP handle its own panel updates
  • Do system updates manually from SSH
  • Always check the update list first
  • Backup Postfix, Dovecot, Roundcube, and cwpsrv configs before updating
  • Test Roundcube, Postfix, Dovecot, and MariaDB immediately after the update
  • Keep notes of any manual fixes that may be overwritten by CWP updates
This gives more control and makes troubleshooting much faster if Postfix, Dovecot, Roundcube, or CWP webmail breaks after an update.

The best possible way to start your online marketing : fspirits.com/go/leadsleap-home
Explode Your Web Site Traffice: fspirits.com/go/sparktraffic
Start your affiliate journey here: fspirits.com/go/olsp-academy
Best Solution To Create Videos: fspirits.com/go/create-studio-pro
Best Solution To Create Graphics: fspirits.com/go/clickdesigns
Smart Chat Automation: fspirits.com/go/chatterpal
Multi-Purpose Video Maker: fspirits.com/go/avatar-builder
Multi-Purpose Video Creator: fspirits.com/go/video-creator
AI Human Spokesperson Videos: fspirits.com/go/humanpal

Παρακαλούμε Σύνδεση ή Δημιουργία λογαριασμού για να συμμετάσχετε στη συζήτηση.

  1. Forum
  3. Main Forum
  5. English Section
  7. CWP Control
  9. Safer Manual Update Workflow For CWP7 Servers After Recent Postfix And Roundcube
Χρόνος δημιουργίας σελίδας: 0.076 δευτερόλεπτα
Powered by Kunena Φόρουμ