Descripción
⚙ CWP7 Tweak Manager
A powerful all-in-one maintenance, diagnostics, security, mail,
networking and servidor repair toolkit created specifically for
CWP7 / Control Web Panel administrators.
Take Control of Your CWP7 Servidor Without Constantly Returning to SSH
If you manage CWP7 servers, you already know that many of the most
important troubleshooting, maintenance and optimization tasks still
require SSH access.
A website suddenly returns a 403 error. Files have been extracted as
root:root. SpamAssassin appears to be running but spam
continues reaching your mailbox. CSF is pointing to unexpected iptables
paths. IPv6 needs to be disabled. XFS quotas need to be configured.
A CWP hostname certificate is correct on disk but the panel is still
serving an older certificate.
The normal solution is to search through your notes, connect through SSH,
locate the correct configuration file, make a backup, run several commands,
restart a service and then hope everything worked correctly.
It brings frequently used CWP7 administration procedures into one
organized graphical interface with diagnostics, explanations,
confirmation steps and post-operation verification.
This is not a collection of blind one-click optimization scripts.
CWP7 Tweak Manager is designed around a much safer philosophy:
A Central Maintenance Console for CWP7
CWP7 Tweak Manager organizes servidor administration into clear sections,
so you can quickly find the type of operation you need.
📁 Files
Account ownership repair, permissions normalization and document-root diagnostics.
🛡 Security
CWP SSL diagnostics, CSF tooling, iptables validation and RPC checks.
🌐 Network
IPv6 management, FTP TLS diagnostics and networking-related tweaks.
💾 Storage
XFS quota configuration and CWP account quota synchronization.
⚡ Web & PHP
Apache diagnostics, configuration repair and PHP OPcache inspection.
SpamAssassin health tests, mail pipeline detection, tuning and diagnostics.
📡 IP Reputation
Blacklist and reputation monitoring with automatic warning emails.
🗄 Database
Database and Roundcube readiness checks without dangerous blind database operations.
🔑 License
Integrated Freespirits servidor licensing, activation, validation and deactivation.
Intelligent Account Ownership & Permission Repair
One of the most common CWP7 problems happens when website files are copied,
extracted or uploaded as root.
Instead of belonging to the CWP account, website files may become:
This can result in 403 errors, PHP problems, WordPress update failures,
Joomla extension issues, cache errors, FTP problems and users being unable
to modify their own website files.
CWP7 Tweak Manager can safely inspect a selected account and normalize
the ownership and permissions of its website content.
- Corrects root-owned website files under the selected account.
- Corrects the account’s primary ownership and group where appropriate.
- Sets normal directories to 0755.
- Sets normal website files to 0644.
- Protects symbolic links and hard-linked files.
- Skips files belonging to another alojamiento cuenta.
- Avoids crossing into unrelated mounted filesystems.
- Preserves special treatment for sensitive files and executables.
- Performs a second verification scan after the repair.
It performs a post-check and reports whether any eligible ownership
or permission problems remain.
Smart CWP Hostname SSL Diagnostics
CWP hostname SSL problems can be frustrating because a valid certificate
may already exist while cwpsrv continues referencing an older certificate.
CWP7 Tweak Manager can inspect:
- En servidor hostname.
- The active hostname.bundle certificate.
- Legacy hostname.crt references.
- The hostname private key.
- Certificate and key matching.
- Certificate validity dates.
- cwpsrv configuration syntax.
- Certificates actually served on CWP ports.
- Unexpected certificate references in active configuration files.
If everything is already correct, the module says so and removes the
unnecessary repair action.
If a genuine stale certificate reference is detected, the repair workflow
can back up the relevant configuration, make the minimal change, validate
cwpsrv, reload the service and retest the served certificate.
Smarter CSF & iptables Validation
Firewall maintenance is an area where blindly applying commands can be
dangerous. CWP7 Tweak Manager therefore separates package installation,
configuration repair and firewall reload into independent guarded steps.
The module understands that on AlmaLinux:
It also resolves the actual executable behind iptables wrappers.
Therefore valid configurations such as:
are understood as valid aliases rather than incorrectly reported as
broken paths.
- Checks whether iptables packages are installed.
- Validates all six CSF iptables / ip6tables paths.
- Resolves aliases and symbolic paths intelligently.
- Checks ownership and executable safety.
- Repairs only paths that genuinely need repair.
- Keeps CSF reload as a separate guarded action.
IPv6 Management Through the GUI
CWP7 Tweak Manager can inspect both the running IPv6 state and the
configuration intended for the next boot.
It checks:
- Whether IPv6 is enabled in the running kernel.
- Whether IPv6 is disabled in installed boot entries.
- Detected IPv6 addresses.
- IPv4 availability before staging network changes.
The controls are state-aware. If IPv6 is already disabled, you are not
shown another meaningless Disable button. The available action becomes
Enable IPv6.
FTP over TLS Diagnostics
The module includes tools for diagnosing Pure-FTPd and Explicit FTPS.
- Detect Pure-FTPd TLS configuration.
- Check whether the TLS certificate exists.
- Test standard FTP port 21.
- Test custom ports such as 6477.
- Check availability of the CWP Pure-FTPd TLS installer.
- Run the CWP-provided TLS installation workflow when appropriate.
The module clearly distinguishes between enabling FTP TLS and configuring
a custom FTP listener or firewall rule.
XFS Disk Quota Management
Disk quotas on AlmaLinux/CWP require coordination between filesystem
mount options, boot parameters, XFS accounting and CWP account settings.
CWP7 Tweak Manager divides the procedure into three clear stages.
1 Enable XFS Quotas
The module checks the filesystem and mount layout, prepares the required
quota flags and safely stages the required boot parameters.
2 Configure CWP
After reboot, the module verifies that XFS accounting and enforcement
really are active before configuring CWP’s quota type and partition.
3 Synchronize Existing Accounts
Existing CWP package and account disk limits can then be reapplied.
Advanced SpamAssassin Health & Protection
One of the most important recent additions to CWP7 Tweak Manager is the
advanced SpamAssassin diagnostic and management system.
Simply seeing that spamassassin.service is running does
not prove that incoming mail is actually passing through SpamAssassin.
Different CWP installations may use different mail pipelines such as:
or:
CWP7 Tweak Manager attempts to detect the real mail filtering path before
suggesting a repair.
Pipeline Detection
Detect Direct spamd, Amavis, Mixed or an unknown filtering path.
SpamAssassin Lint
Validate the active SpamAssassin configuration before making changes.
GTUBE Test
Use the standard SpamAssassin test message to prove spam detection works.
Bayes & Razor Diagnostics
Detect permission, lock and home-directory problems commonly seen on AlmaLinux.
GUI Spam Sensitivity Control
Administrators can adjust SpamAssassin sensitivity directly through
the module without manually editing configuration files.
4.5 Stronger
4.0 Aggressive
3.5 Very Aggressive
Optional subject tagging can also be enabled:
Before applying a configuration change, CWP7 Tweak Manager backs up the
existing configuration, validates the new configuration and restores the
previous state if validation fails.
Analyze Suspicious Emails
When an obvious phishing or spam message reaches a mailbox, you can paste
its raw email source into CWP7 Tweak Manager.
The module can then tell you:
- Whether the original message already contained SpamAssassin headers.
- The score assigned by the servidor’s current SpamAssassin rules.
- The active required spam threshold.
- Whether the message would currently be classified as spam.
- Which rules contributed to the result when available.
completely and a message that was scanned but simply did not receive
a high enough score.
The pasted message is processed locally for analysis and is not intended
to be permanently stored by the module.
SpamAssassin Rule Updates
CWP7 Tweak Manager can run the official SpamAssassin rule updater:
If new rules are available, the module validates the resulting
configuration and reloads the correct mail-filter service.
If no update is available, unnecessary service restarts are avoided.
Weekly IP Reputation Monitoring
A correctly configured mail servidor can still suffer delivery problems
when its outbound IP develops a poor reputation.
CWP7 Tweak Manager integrates checks for:
- Proofpoint IP Check
- MultiRBL
- Trend Micro Email Reputation Services
The result is classified as:
LISTED / BLOCKED
UNKNOWN / INCONCLUSIVE
An UNKNOWN response is deliberately not treated as CLEAN.
The module can also create an automatic weekly reputation check.
You choose:
- The IP address to monitor.
- The weekday.
- The check time.
- The administrator email address.
send an email warning automatically.
If a provider cannot return a reliable machine-readable result, the
module can instead warn the administrator that manual verification is required.
Web, Apache & PHP Diagnostics
CWP7 Tweak Manager also includes practical diagnostics for common
webserver and PHP problems.
- Apache configuration checks.
- Detection of known malformed ModSecurity LoadFile entries.
- Guarded configuration repair.
- Apache syntax validation.
- PHP OPcache detection across installed CWP PHP-FPM versions.
- OPcache configuration inspection.
The emphasis is always on detecting the real servidor state instead of
blindly applying generic performance settings.
Database & Roundcube Diagnostics
The Database section provides useful read-only health information about
database and Roundcube components.
- Database service readiness.
- Backup utility availability.
- Available disk capacity.
- Roundcube configuration detection.
- Relevant database configuration paths.
Destructive operations such as blindly dropping databases are deliberately
excluded from simple one-click repair workflows.
Portable Servidor Preferences
CWP7 Tweak Manager supports exporting selected module preferences into
a portable JSON configuration.
This can help administrators maintain a consistent preferred configuration
across multiple CWP servers.
Integrated Commercial Licensing
CWP7 Tweak Manager includes integration with the Freespirits License Manager,
turning the module into a properly licensed commercial servidor product.
The License section supports:
- License activation.
- Immediate license validation.
- Cached license state.
- Grace-period handling.
- Servidor-bound activation.
- License deactivation.
- Reusable activation slots according to the license policy.
The full license key is stored securely in a root-only file.
The module uses secure permissions and does not need to expose the
license key publicly inside the CWP interface.
Deactivating a license releases the activation from the current VPS
without uninstalling the module, removing servidor tweaks or deleting the license itself.
Diagnostics Still Available When Troubleshooting
Licensing has been designed practically.
Read-only diagnostics can remain available so administrators are not left
blind when troubleshooting a servidor.
Actions that modify servidor configuration require a valid license or a
permitted licensed grace state.
A State-Aware Interface That Understands the Servidor
One of the most important differences between CWP7 Tweak Manager and a
traditional collection of shell scripts is that the interface is designed
to react to the actual state of the servidor.
For example:
- If IPv6 is already disabled, the module does not tell you to disable it again.
- If XFS quotas are already active, the Enable button disappears.
- If CSF paths are already valid, the Repair button disappears.
- If the CWP hostname SSL configuration is correct, no unnecessary SSL repair is offered.
- If iptables packages are installed, there is no reason to reinstall them.
- If account ownership and permissions are already correct, no chmod/chown operation is proposed.
you that everything is already correct instead of encouraging unnecessary changes.
Built for Real Alojamiento Administrators
CWP7 Tweak Manager is ideal for:
- Web alojamiento providers.
- Freelancers managing customer VPS servers.
- Web design and development agencies.
- System administrators.
- WordPress and Joomla alojamiento providers.
- Developers managing their own production infrastructure.
- Administrators maintaining multiple CWP7 servers.
The more servers you maintain, the more valuable standardized and
repeatable maintenance procedures become.
Instead of remembering which command solved a problem six months ago,
the module explains the procedure directly in the administration interface.
Simple Installation & Upgrade Process
CWP7 Tweak Manager uses the same straightforward package format as other
Freespirits CWP modules.
Upload the module ZIP into:
Then install it using:
cd /root
rm -rf /root/cwp7-tweak-manager-v0.9.0
unzip -o /root/cwp7-tweak-manager-v0.9.0.zip -d /root/
cd /root/cwp7-tweak-manager-v0.9.0
chmod +x install.sh
bash install.sh
The installer is designed to recognize compatible previous versions,
back up existing module files and protect installations that appear to
have unknown local modifications.
Installing the Module Does Not Automatically Change Your Servidor
Simply installing CWP7 Tweak Manager does not automatically:
- Change website ownership.
- Change file permissions.
- Disable IPv6.
- Reload CSF.
- Enable quotas.
- Modify SpamAssassin.
- Restart mail services.
- Enable weekly reputation monitoring.
- Reboot your VPS.
Servidor-changing actions remain under the administrator’s control.
En CWP7 Maintenance Toolkit We Always Wanted
SSH remains an essential part of professional servidor administration.
CWP7 Tweak Manager is not designed to replace SSH entirely.
Instead, it addresses the large number of recurring administration tasks
that do not need to be manually repeated every time.
Why search old forum posts, SSH history and personal notes whenever the
same issue returns?
Why blindly run a command before checking whether the servidor actually
needs the change?
Why continue displaying a Repair button after a problem has already been fixed?
CWP7 Tweak Manager combines your most frequently used CWP7 maintenance
workflows into one intelligent interface.
From website permissions and ownership to SSL, quotas, CSF, IPv6,
FTP TLS, SpamAssassin, PHP, databases and IP reputation monitoring,
the goal is to give administrators a single practical maintenance center.
