CAll Us: +92-3338901062 Submit Ticket   Login
Install CXS ( ConfigServer eXploit Scanner ) on Centos WebPanel (CWP) Server

Install CXS ( ConfigServer eXploit Scanner ) on Centos WebPanel (CWP) Server

ConfigServer eXploit Scanner (cxs) is a tool from configserver that performs active scanning of files as they are uploaded to the server along with the files already exist on the server.

This is one of the best security tool for your server and thus you should install it on your CWP (Control WebPanel) server to prevent the dangerous scripts to be uploaded on your server.

In this tutorial, I will show you how to install and configure CXS software on your CWP server.

Requirements

  • Control WebPanel (formerly known as Centtos WebPanel) Installed on Server
  • root server login
  • Active CXS license for your server IP

Step 1 - Downloading and Installation of CXS from official site

Login to your server SSH using any SSH client e.g. Putty as a root user and perform following commands

cd /usr/src
rm -f cxs*
wget https://download.configserver.com/cxsinstaller.tgz
tar -xzf cxsinstaller.tgz
chattr -i -R /usr/local/cwpsrv/htdocs/admin/
perl cxsinstaller.pl ipv4 
rm -fv cxsinstaller.*

Don’t forget to replace “ipv4” with your licensed server IP.

Step 2 - Adding clamd socket to cxs config for the scanner

sed -i '$ a clamdsock=/var/run/clamd.amavisd/clamd.sock' /etc/cxs/cxs.defaults

You may get following issue while performing the above command

sed: can’t read /etc/cxs/cxs.defaults: No such file or directory

It means that you don’t have file /etc/cxs/cxs.defaults. Actually, this exists but disabled as /etc/cxs/cxs.defaults
So, use following command to fix this issue

cd /etc/cxs
mv cxs.defaults.sample cxs.defaults

Once this has been done, then try to perform above command again.

After installation of CXS, go to CWP-admin > Configserver Scripts >> ConfigServer Exploit Scanner and go through onscreen instructions and complete the installation (Default Settings are recommended)

Known Issues

If CXS gui ask for clamd scanner socket, run the `Step 2` command again and restart cxswatch service with the command given below

service cxswatch restart

If you encounter any issue during this process, leave the comment below or send an email at info@hostinpk.com