Cloudron Forum

My pleasure. Glad I was able to contribute to this

Sure.. its done!

So, how much time do you need, and till then, what can I do for the resolution? Any alternative solutions?

@james

Thanks for the links, but the MySQL connection itself is fully working — both inside and outside the container:

• mysql CLI connects fine using TLS (--ssl-mode=VERIFY_CA)
• Python’s MySQLdb driver inside the container runs SELECT NOW() successfully
• TLS handshake works (openssl s_client …)

So there is no network or credentials problem.

The actual issue is with Cloudron’s Redash package workers:

• supervisorctl status shows only workers for periodic emails default queues.
• Redis queues queries and schemas keep growing (LLEN rq:queue:queries > 0), but no worker consumes them.
• Redash UI stays stuck at “Query in queue…” because no worker for queries queue is running.

Normally, Redash workers should be started with:

QUEUES=queries,schemas,scheduled,emails,periodic,default

But the Cloudron package doesn’t expose Environment settings in the UI and prevents us from reading /proc/$pid/environ inside the container, so we can’t start a worker manually either (REDASH_COOKIE_SECRET missing).

This is 100% a packaging/configuration issue with the Cloudron Redash app, not with MySQL or Azure.

Please update the Redash app to:

• Start at least one worker for queries,schemas,scheduled,emails,periodic,default queues; OR
• Expose QUEUES and other REDASH_* env vars in the Cloudron App UI so we can start workers ourselves.

Until then, any query will remain stuck in the queue because no worker is available to process it.

So if you can help me with that.

Thanks!

When I try to connect nc -v mydb.mysql.database.azure.com 3306 from my Cloudron server to the Azure DB, it connects successfully.

I did not find any error's in Logs. Can you help me debug this?

Hello,

I tried to connect my Azure Database for MySQL flexible server in Redash but it's not getting connected.

I get an Internal Server Error when I try to Test Connection:

Any help is appreciated.

Thanks!

@robi Yes, I did that already, but if not don,e then even if changing the password for the email won't log them out on its own?

No, they have no connections with us. Also, I have blacklisted and blocked those IPs. I found 2 IPs for the same.
You said that emails were sent whilst logged in as dikshant@ So how can they have access if I have changed the password?

@ccfu

This is what I found as a queued email:

{
"ts": 1756359482397,
"type": "queued",
"direction": "outbound",
"uuid": "1332F07B-0C99-419E-A058-C1C88C5B8A94.1",
"messageId": "<8cdb5704f0341e15369841ea1ed2d8d2ec82cb3e@w*****.in>",
"mailFrom": "<dikshant@w*****.in>",
"spamStatus": null,
"mailbox": null,
"quotaPercent": null,
"rcptTo": [
"blinbernard@sfr.fr",
"cfcappa@hotmail.com",
"saqrhani@gmail.com",
"60saladino@gmail.com",
"johnbagby@yahoo.com"
],
"remote": {
"ip": "118.151.221.26",
"port": 41442,
"host": "NXDOMAIN",
"info": "NXDOMAIN",
"closed": false,
"is_private": false,
"is_local": false
},
"authUser": "dikshant@w******.in",
"message": "Message Queued (1332F07B-0C99-419E-A058-C1C88C5B8A94.1)"
}

No app passwords as well.

Also, I'm sure there is no virus as well in the system.

My Email Queue seems empty.

Hello,

Please check this:

{
"ts": 1756622347138,
"type": "delivered",
"direction": "outbound",
"uuid": "1332F07B-0C99-419E-A058-C1C88C5B8A94.1.3",
"messageId": "<8cdb5704f0341e15369841ea1ed2d8d2ec82cb3e@w******.in>",
"mailFrom": "<dikshant@w*****.in>",
"spamStatus": null,
"mailbox": null,
"quotaPercent": null,
"rcptTo": [
"saqrhani@gmail.com",
"60saladino@gmail.com"
],
"server": {
"host": "142.250.27.27",
"ip": "142.250.27.27",
"port": 25
},
"response": "OK 1756622347 4fb4d7f45d1cf-61cfc20e76csi3275416a12.146 - gsmtp"
}

Hello, how to send the header of the emails? Can you guide me on this? I'm just receiving Mailer Demon Failure emails and not the ones that are sent.

No app is configured with the email. For now, I have inactivated the email account.

We changed the password multiple times.. but still the same.. the emails are being delivered to unknown users and even we don't know what exactly is being sent in the email..

This is urgent and I need a resolution for the same.

Thanks!

Thank you for your reply.

But as I have mentioned in my first email that I have already changed the password of the user right away when I found it compromised.

Can't we find out from where and how these emails are being executed? Like any script running or via authentication, is it being done?

As this is something that is of grave concern, if we can't find the loophole in how this is being executed.

I hope you understand.

Any help to stop this SPAM is appreciated

I'm not sure from where these emails are going.. for the time being I need to deactivate the email account to stop the SPAM. Attached screenshot of the event log.

Hello,

I'm frequently facing an issue of email spoofing, basically someone spammer or hacker, gets into any of my users' email accounts and starts sending bulk emails to users.

I'm not sure how this is getting into even though I changed the password of the email account; still, the spammer gets into the account and sends spam to users.

Is there any way to find out what's causing this infiltration and how the spammer is getting into the system?

Please let me know and guide me on this.

Thanks!

Thank you! It worked. But how did it crash? Like, I gave the permissions to the folders?

Hello,

I'm getting this error.

{
  "status": "Failed Dependency",
  "message": "Unable to connect to filemanager: connect ECONNREFUSED 172.18.0.23:3000 ECONNREFUSED"
}

The last thing I did was select multiple folders inside the public folder (LAMP App) at once and then tried to change their permission from root to www-data, which resulted in a long wait, and then, when I refreshed the page, nothing was visible on the file manager.

Screenshot attached:

https://prnt.sc/Xg99Pfr8hTyM

Let me know what's the issue is and how to get this issue resolved.

Thanks!

@james I have sent the logs in the private message.