You may see this when running /scripts/initquotas or /scripts/fixquotas. Either there’s something wrong with your /etc/fstab file that cPanel couldn’t correct, or you have your backups set to provision to a folder in /home, which is not recommended. This disabling of usrquota on /home is intentional if backups are set to go to /home.

# grep BACKUP /etc/cpbackup.conf

You can check the configuration in WHM >> Configure Backups, or via SSH with:

root@main [/home/ihost/public_html/skoal]# grep BACKUPDIR /etc/cpbackup.conf
BACKUPDIR /home/somefolder

If you see something similar to the above, quotas are not going to work for you. You’ll want to set backups to be delivered offsite via FTP, or to another partition, ideally a completely separate hard drive in case of hard drive failure.

Eventually I’ll post a review of these (at least the free ones) as time allows.

Free WHM Plugins

• ConfigServer.com Firewall – manages iptables, handles brute force attacks, and much more. This is one that I’ve used, and definitely recommend.
• ConfigServer.com ModSec Control – modify ModSecurity rules on a global or per-user basis, and view logs.
• NDCHost’s Clean Backups – clean backups for accounts which don’t exist after a certain period, automated, or on a manual basis.
• NDCHost’s Account DNS Check – Checks and reports domains which don’t resolve to the assigned IPs in http.conf.
• ConfigServer.com Explorer – provides a “File Manager-like” interface allowing you access to your filesystem via GUI.
• ConfigServer.com Mail Queues – Stats and management of your server’s mail queue.
• ConfigServer.com Mail Manage – Management of your email accounts, important statistics, and displays of accounts over quota, over a certain size, etc.

Pay WHM Plugins

• ConfigServer.com’s eXploit Scanner – active scanning of your server to prevent exploits.
• NDCHost’s Secondary MX – Turns a cPanel DNSonly install into a backup MX server.

Free cPanel Plugins

• cPanel’s cPAddons – Allows installation of several popular PHP scripts. Installed via WHM >> Install cPAddons.

Pay cPanel Plugins

• Netenberg’s Fantastico – Installs over 50 popular PHP scripts [List]. The vast majority are free, open-source software, though a few require a license.
• Softaculous – over 130 PHP scripts.

https://yourdomain.com:2087/scripts2/doautofixer?autofix=iptablesflush

This script will do a flush of your iptables chains, allowing you to login and correct your configuration.

https://yourdomain.com:2087/scripts2/doautofixer?autofix=safesshrestart

This will terminate your existing sshd daemon, and start SSH on port 22, or, if that’s your normal default port, it will start sshd on port 23, so you can login and make your corrections.

Other autofixer scripts are listed at http://httpupdate.cpanel.net/autofixer/ and can be run by inserting them after the following URL, after logging into WHM:

https://yourdomain.com:2087/scripts2/doautofixer?autofix=

1. Forums – http://forums.cpanel.net

2. IRC – On EFNET, join #cpanel

It’s no problem to have Apache listening on a private IP address because the PIX or ASA handles the public to private IP address translation.  But for DNS, when a zone is queried, it can’t provide a private IP address and expect an outside server to be able to resolve it.  That’s where the fixup, static, and alias commands come in handy.

There are a few IOS rules that will help out immensely with cPanel and DNS translation.

Cisco to the rescue! This will enable the firewall to provide address translation to DNS packets:
fixup protocol dns maximum-length 512

A static NAT mapping must exist, associating the public & private IP:
static (inside,outside) cpanelserver.ext cpanelserver.int 255.255.255.255

An alias must be created which allows translation inside the private network:
alias (inside) cpanelserver.int cpanelserver.ext 255.255.255.255