An error occurred while updating Akismet Anti-Spam: Could not create directory.

I have applied following permission on files and folders.

sudo chown -R nginx:nginx /var/www/mysite/html
sudo find /var/www/mysite/html -type d -exec chmod 755 {} \;
sudo find /var/www/mysite/html -type f -exec chmod 644 {} \;

I have another WordPress site on VirMach VPS with same permission and there it updates fine. Here's result of ls -l

[opc@arm html]$ ls -l
total 212
-rw-r--r--  1 nginx nginx   405 Feb  6  2020 index.php
-rw-r--r--  1 nginx nginx 19915 Jan  1  2022 license.txt
-rw-r--r--  1 nginx nginx  7401 Mar 22 21:11 readme.html
-rw-r--r--  1 nginx nginx  7165 Jan 21  2021 wp-activate.php
drwxr-xr-x  9 nginx nginx  4096 Jul 12 16:16 wp-admin
-rw-r--r--  1 nginx nginx   351 Feb  6  2020 wp-blog-header.php
-rw-r--r--  1 nginx nginx  2338 Nov  9  2021 wp-comments-post.php
-rw-r--r--  1 nginx nginx  3230 Aug 18 17:53 wp-config.php
drwxr-xr-x  4 nginx nginx    52 Jul 12 16:16 wp-content
-rw-r--r--  1 nginx nginx  3943 Apr 28 09:49 wp-cron.php
drwxr-xr-x 26 nginx nginx 12288 Jul 12 16:16 wp-includes
-rw-r--r--  1 nginx nginx  2494 Mar 19 20:31 wp-links-opml.php
-rw-r--r--  1 nginx nginx  3973 Apr 12 01:47 wp-load.php
-rw-r--r--  1 nginx nginx 48498 Apr 29 14:36 wp-login.php
-rw-r--r--  1 nginx nginx  8577 Mar 22 16:25 wp-mail.php
-rw-r--r--  1 nginx nginx 23706 Apr 12 09:26 wp-settings.php
-rw-r--r--  1 nginx nginx 32051 Apr 11 11:42 wp-signup.php
-rw-r--r--  1 nginx nginx  4748 Apr 11 11:42 wp-trackback.php
-rw-r--r--  1 nginx nginx  3236 Jun  8  2020 xmlrpc.php

Site Health in WordPress says:

Shows whether WordPress is able to write to the directories it needs access to.

The main WordPress directory    Not writable
The wp-content directory    Not writable
The uploads directory   Not writable
The plugins directory   Not writable
The themes directory    Not writable

But the other site on VirMach VPS says these folders are writeable.

SELinux is disabled.

I owned a KS-LE server from their last BF offer. When I purchased it was 1Gbps full duplex but unfortunately it didn't last longer. It lasts only for few weeks. Nevermind i was happy only the upload got affected. But since few days upload speed is not more than 35Mbps. Opened a ticket and they said we can't guaranteed the bandwidth in Kimsufi. Only motherboard got replaced. Nothing happened.

root@rescue:~# iperf3 -c bhs.proof.ovh.ca -4
Connecting to host bhs.proof.ovh.ca, port 5201
[ 4] local 158.xx.xx.xx port 58092 connected to 51.222.154.207 port 5201
[ ID] Interval Transfer Bandwidth Retr Cwnd
[ 4] 0.00-1.00 sec 5.14 MBytes 43.1 Mbits/sec 796 2.83 KBytes
[ 4] 1.00-2.00 sec 2.98 MBytes 25.0 Mbits/sec 449 1.41 KBytes
[ 4] 2.00-3.00 sec 3.85 MBytes 32.3 Mbits/sec 517 1.41 KBytes
[ 4] 3.00-4.00 sec 4.23 MBytes 35.4 Mbits/sec 722 1.41 KBytes
[ 4] 4.00-5.00 sec 3.48 MBytes 29.2 Mbits/sec 517 1.41 KBytes
[ 4] 5.00-6.00 sec 4.47 MBytes 37.5 Mbits/sec 624 1.41 KBytes
[ 4] 6.00-7.00 sec 3.73 MBytes 31.3 Mbits/sec 576 2.83 KBytes
[ 4] 7.00-8.00 sec 4.47 MBytes 37.5 Mbits/sec 712 4.24 KBytes
[ 4] 8.00-9.00 sec 4.23 MBytes 35.4 Mbits/sec 680 4.24 KBytes
[ 4] 9.00-10.00 sec 4.23 MBytes 35.4 Mbits/sec 696 1.41 KBytes

---

[ ID] Interval Transfer Bandwidth Retr
[ 4] 0.00-10.00 sec 40.8 MBytes 34.2 Mbits/sec 6289 sender
[ 4] 0.00-10.00 sec 40.6 MBytes 34.1 Mbits/sec receiver

What can i do other than giving up on this server?

Facts

• I have used two different providers for this, same issue
• Using mikrotik initially and then switched to opnsense as firewall. I know, I am not using both of them at the same time

Configuration
vmbr0 -> primary IP for the proxmox (works brilliant)
vmbr1 -> additional public IP for the firewall (mikrotik / opnsense)
vmbr2 -> LAN interface

Problem?
vmbr0 works brilliantly, maybe because it's BridgePort to ens18 (primary)
vmbr1 doesn't have internet even though the IP address, Subnet and Gateway are correct. Can't really BridgePort it to ens18 as well

Any pointers? please do share

Trying to decide what domain to use for a blog and obviously would be better if it isn't severely tainted

Tried moz.com's free tool but that doesn't have anything on the domains in question. Same for way back machine. Anybody know anything else I can try?

I have a cpanel account and ModSecurity is enabled.
i want to serve for example cfg file but server replies back with 403.
If i disable modesecurity via the cpanel the file gets served ok.

my question How to allow some extension through ModSecurity using .htaccess?

appreciate any guide on how to solve such access problems.

Thanks
ehab

We are going to start working on Knowledgebase for our hosting business.

Just curious, what do you use for Knowledgebase? Default WHMCS feature or some third party system.

I understand default WHMCS feature is handy when opening a ticket as it show related articles from KB, but I have seen more and more hosts moving to third party system for this.

Thank you for your input in advance!

Who should Darkstar use to resolve DNA DNS requests? Why!?

Eeeks! We can get IPv6 addresses via DNS requests sent over IPv4, but don't we need an IPv6 address or two in our /etc/resolv.conf?

If the DNS system experienced "trouble," would we be better with a longer list of resolvers than two each IPv4 and IPv6? Back in the old days I remember seeing a long list which included, among other things, all of the DNS root servers. Perhaps sending DNS requests to the root servers might not work nowadays.

D-Mumbles, N-rumbles, S-tumbles

tom@darkstar:~$ cat /etc/resolv.conf
options single-request
search metalvps.com
nameserver 1.1.1.1
nameserver 1.0.0.1

tom@darkstar:~$ 

## Perhaps 20 times as long to ping 1.1.1.1 as 8.8.8.8? Really!!??

tom@darkstar:~$ date; time ping -c 2 1.1.1.1
Sat Dec 18 21:17:41 UTC 2021
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=57 time=21.2 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=57 time=21.2 ms

--- 1.1.1.1 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 21.221/21.226/21.231/0.005 ms

real    0m1.030s
user    0m0.004s
sys     0m0.001s
tom@darkstar:~$ date; time ping -c 2 8.8.8.8
Sat Dec 18 21:17:55 UTC 2021
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=115 time=0.952 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=115 time=0.872 ms

--- 8.8.8.8 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.872/0.912/0.952/0.040 ms

real    0m1.008s
user    0m0.003s
sys     0m0.001s
tom@darkstar:~$ 

References:

"Up to MAXNS (currently 3, see <resolv.h>) name servers may be listed, one per keyword. "
-- https://www.man7.org/linux/man-pages/man5/resolv.conf.5.html

"DNS NSS improvement" "Add “single-request” to the options in /etc/resolv.conf. "
-- http://udrepper.livejournal.com/20948.html

A shortsighted choice when i setup the backup I only backup the /home and a few other directory that contain data so restoring took long since I needed to install and config instead of just restoring the whole system at once.

Am thinking I will tweak my setup to backup the whole server not sure if i should use Borgmatic or something else.

    var timer;

    $("#dmn2, #dmn1, #tld").bind("keyup change", function () {
        clearTimeout(timer);
        timer = setTimeout(validateDomain, 2500);
        return false;
    });

It works when I type something in input field or select some option.

Now, the problem is when I enter something and click mouse away from input field. It registers double call. Seems clicking mouse away from input field counts as "change". How to prevent this?

I am having a weird issue when using DA's API with basic auth (MXroute).

I'm 100% certain the credentials are correct, however I'm getting "Unauthorized" error on every even requests, while the API works fine on every odd requests.

I'll put a screenshot of my current code, as well as the error I'm getting when the "Unauthorized" error happens. If anyone experienced this issue, or knows a fix for it, any input will be highly appreciated.

Thanks!

does anyone know how to use cpanel api to delete addon domains.

preferably using curl or a php script.

i don't mind making several calls just delete the domain

Thanks for any helps

# Auto-discover columns
columns = []
column = []

for data in json_data:
    column = list(data.keys())
    for col in column:
        if col not in columns:
            columns.append(col)

# Auto-bind values to discovered columns
value = []
values = []

for data in json_data:
    for i in columns:
        value.append(str(dict(data).get(i)))
    values.append(list(value))
    value.clear()

insert_query = 'insert into logs values (null,:date,:server,:ip,:mta,:country,:env_from,:from,:subject,:spam_type,:mqid,:sender_domain,:auth_id,:verdict,:class,:score,:raw,:pure_log)'

c = db.cursor()
c.executemany(insert_query, values)
db.commit()

There is 2 data points which need pre-processing before insertion: 'env_from' and 'subject'. How to do that? I guess I need to modify '# Auto-bind values to discovered columns' part of code. But whatever I do - it just rejects with error. Specifically I want to decode strings in utf8 mime (email).

i have several VPS with VirMach since years, all running Alpine Linux i've installed from netboot.xyz (network install). They are all running smooth since a while but there is one i've never been able to install. It's been a while, as i was "well just let it on the side for now eventually VirMach may have an issue they will fix" but after months i'm not able to install my server. I'm pretty sure anyway there is a workaround without involving my provider so i wanted to ask the community here first.

This VPS is able to run with they're premade setup (i've tried Ubuntu, works).
Again i already have several VPS with the same provider, all on Alpine Linux, same setup used. The difference between them is the node where they are hosted, as i often jump on new discounts they have (this one is a BF-2021 special, i have 4 VPS from this offer, 3 are working with Alpine).

Please see following screenshot to view my issue:

Thank you so much for sharing your time helping to debug .

Anyway my trusty @InceptionHosting UK VPS of 6.5 years got suspended.

edit: removed irrelevant detail

Worst case would be to freshly install Windows (doesn't hurt to flush it ever so often), however I'd like to avoid that. Also got an Aomei System backup of the system drive, however it's from february which is kind of a setback (although, worst case it's not that much of a problem).

Appreciate any ideas

FROM='Mr. Void <mrvoid@devoid.tld>'|||ENV_FROM='<mrvoid@devoid.tld>'

And this is my parser:

grep -oP "(?<=FROM=\').*?(?=\')"

It does work by bringing me both FROM and ENV_FROM. This is bad. I want EXACT match. Is it possible with lookbehind and lookahead?

I am currently using a dedi server to host and manage 3 sites/apps below. Spending around $67/month.

1- Small store frontend, gets 10-20 visitors a day.
2- SaaS website, gets 50-70 hits a day
3- Hostbill (for billing/ordering/helpdesk for the above two sites), gets around 10-20 visitors a day.

I don't use wordpress. The store frontend site is PHP and HTML based and has 10 pages. The SaaS is a php script/app and it hardly uses around 500 MB RAM. Am pretty sure Hostbill is the most resource intensive out of these three, but I've never seen it utilizing more than 1 GB RAM.

Obviously the dedi server is under-utilized. And I have decided to move all the sites to VPS and save some money on the monthly fees.

I was thinking on two different setups and I'd appreciate if you can recommend or suggest which one I should go for.

Setup 1:

• 1st VM with 2x vCPU and 2GB RAM for the store frontend and SaaS Script
• 2nd VM with 2x vCPU and 2GB RAM for the Hostbill
• 3rd VM with 2x vCPU and 2GB RAM for DB hosting (to be used bu SaaS script and Hostbill)

OR

Setup 2:

• 1st VM with 3x vCPU and 4GB RAM for the store frontend and the SaaS script. DB will be used within this same server
• 2nd VM with 3x vCPU and 4GB RAM for hostbill app. DB will be used within this same server

Am aware I can host all three sites/apps on a VPS with higher resources or on a VDS. But I have decided to keep the frontend sites and the hostbill (for billing and helpdesk) on separate VMs. That way if I mess up something or if one of the VM goes down, I still have the second VM to let the users know what's going on and update them in a proper way.

I am more inclined towards the first setup but considering the sites are too small my brain is having a hard time to figure out whether it make sense to have a separate VM just for DB. Am interested in knowing what you guys think is more practical option.

Also, this is my first thread in LES. Am still learning the ins and outs of this community. Please be gentle on me in case I have broken any unspoken rules or missed anything.

The wordpress site is running in these specs:
4 cores CPU[shared],
4 GB RAM,
4TB Bandwidth,
1GB network... etc etc.

Now the site is using woocommerce and has plenty of products online. I have tried my best to optimize it but appearntly i am failing and the site takes so many seconds to load. Client has been complaining.

I will give the website link to anyone interested and that thinks that they might optimize code or something that is really slowing it down so much.

Paid job ofcourse, let me know here or through PM so i can send link.

as i often help non profit organization, i've started to use aliases system for their mails like "Anonaddy" and "SimpleLogin". Overall it's great (preference for Anonaddy because we can send the first email to someone from any alias without having to setup it thru the app first) but they may benefit if they could easily contact a group of people a la Google Groups (not for marketing, but to share informations, unique codes for systems, etc). As those non profits are not in IT, they need tools to be easy to use with their daily apps and hardwares (so mostly webapp with bare minimum management).

• I love listmonk but it looks like a lot to be more marketing intented.
• I wonder if i should go with mailman 3
• I'm questionning PhpList
• Anonaddy would be a good fit but their limitation could cause issue as we have more than 300 members to reach sometime while their support 100 daily contacts in their best plan
• overall something like Google Groups, but self hosted and more privacy friendly

I would like the app to be supported by Softaculous or be available as Docker image.
What's you best bet on that? How you deal with this?

Thanks a lot for your help .

I'm trying to understand why yabs uses Holy Build Box. So I am asking the LES yabs support desk.

The Security Notice in the README.md for yabs says "The network (iperf3) and disk (fio) tests use binaries that are compiled by myself utilizing a Holy Build Box compiliation [spelling typo] environment to ensure binary portability."

When I look at this Holy Build Box page, it says, "the Holy Build Box approach is to statically link to all dependencies, except for glibc and other system libraries that are found on pretty much every Linux distribution, such as libpthread and libm."

However, when I sneak in while yabs is in action and run ldd on the fio and iperf3 binaries installed by yabs, ldd tells me (please see output below) that both of these binaries are dynamic. Then ldd gives me a list of libraries all of which seem to be installed on the box which is running yabs.

I guess the fio and iperf3 binaries are downloaded by yabs since neither of these is installed on the host.

I hear that linux-vdso is part of the kernel and so presumably wouldn't be statically linked. libpthread and libm each are specifically mentioned above as "system libraries that are found on pretty much every Linux distribution" which wouldn't be expected to be statically linked either. I am guessing ld-linux and libdl also would be on every system. It seems that librt has to do with realtime and is Posix. So maybe librt would be everywhere too.

Could all this mean that the reason to use Holy Build Box is only to ensure the use of an old version of the C library in libc.so.6 and that no dependencies are statically linked for either the fio or the iperf3 provided by yabs? Apparently no, because the glibc version as shown below seems to be 2.35, which is the current version.

So, why use the Holy Build Box if nothing is statically linked and we also are using the current version of glibc instead of an old version? What am I missing?

Thanks in advance for any help! Best wishes and kindest regards from Sonora! 🗽🇺🇸🇲🇽🏜️

root@darkstar:~/test/2022-04-22T05_46_41+00_00/disk# ldd fio
        linux-vdso.so.1 (0x00007ffd22196000)
        librt.so.1 => /lib64/librt.so.1 (0x00007f334efe2000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f334efdd000)
        libm.so.6 => /lib64/libm.so.6 (0x00007f334eef9000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f334eef4000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f334ecda000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f334f01c000)
root@darkstar:~/test/2022-04-22T05_46_41+00_00/disk# file fio
fio: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=da93aaa4b5346d3ee4d4f9ed1d6d04aeb4aa279b, with debug_info, not stripped
root@darkstar:~/test/2022-04-22T05_46_41+00_00/disk# 

root@darkstar:~/test/2022-04-22T05_46_41+00_00/iperf# ldd iperf3 
        linux-vdso.so.1 (0x00007fff4daaa000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f2292531000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f229252c000)
        libm.so.6 => /lib64/libm.so.6 (0x00007f2292448000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f229222e000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f229256b000)
root@darkstar:~/test/2022-04-22T05_46_41+00_00/iperf# file iperf3 
iperf3: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=7354764742f5217d04624d477d5e940fa5850ec2, with debug_info, not stripped
root@darkstar:~/test/2022-04-22T05_46_41+00_00/iperf#

root@darkstar:~# which fio
which: no fio in (/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin:/usr/games:/usr/lib64/libexec/kf5:/usr/lib64/qt5/bin)
root@darkstar:~# which iperf3
which: no iperf3 in (/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin:/usr/games:/usr/lib64/libexec/kf5:/usr/lib64/qt5/bin)
root@darkstar:~# 

root@darkstar:~# /lib64/libc.so.6
GNU C Library (GNU libc) stable release version 2.35.
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
Compiled by GNU CC version 11.2.0.
libc ABIs: UNIQUE IFUNC ABSOLUTE
For bug reporting instructions, please see:
<https://www.gnu.org/software/libc/bugs.html>.
root@darkstar:~# 

The disk needs to be SSD/NVMe and contain at least 100gb (upgradable).
1 ipv4
2g ram 1vcore
Traffic (upload) 2tb/month
ddos protection if possible

Budget: up to US$50/month.

Looking at you who code avery now and then.

Real case for this community.

A vanilla plugin/mod that will show a notification when a user is trying to reply to a thread where the last reply is X days/weeks/month old.

Please describe in short how you would solve it and your price for it.
When you start the project, we expect you to deliver shortly thereafter.
No thank you to those who reply with ”I’ll do it when there I have some free time”

Example: notification as a dialog box or above the textbox.

Before or after the reply button is pressed.

Code will be published on the LES github.

I do not see a way for this to work - admittedly my DA experience is at best rusty and limited.

So far the hosting company support has not been helpful - which is not a good first start.

Any ideas if this is possible?

E3 1270v2, 16GB RAM, 1x500GB SSD, /29 IPv4, 60G DDoS protection, 1G Unmetered, $59/month

So I've been trying to figure this out for the last 2 days, and I seem to be running out of ideas. Figured I can ask here, perhaps someone has had a similar experience, and can point me in the right direction.

So I am an admin for a fairly large Google Workspace organization, and I was asked by my boss to locate some Google Drive files, from an employee, that might be doing some naughty things.

I used the investigation tool and found the ID of said file. Now I am asked to retrieve the file, so they can further investigate it.

My question is - can I, as a super admin, retrieve the file from a users google drive, without changing the users password, logging in, and taking it out this way?

Is there any other alternative that you have done in the past?

Because I personally don't feel comfortable going the nuclear way of logging into their account, but I will if that is the only option.

I am sure there is a different, more appropriate way, but I am seriously running out of ideas.

Thanks to anyone who can help me with some ideas and pointers.

This makes the server unusable. Does anyone experience similar issues and/or have any hint or solution?

 Host                                                                           Loss%   Snt   Last   Avg  Best  Wrst StDev
 1. AS34081 2a0c:8fc1:6400::1                                                    0.0%   139    0.3   0.3   0.3   3.8   0.4
 2. AS???   2a02:6ea0:8:1200:5500::5                                             0.0%   139    0.3   0.3   0.2   0.8   0.0
 3. AS???   m247-tyo.cdn77.com (2a02:6ea0:2:1200:3490::2)                        0.0%   138    0.4   0.7   0.3  13.1   1.4
 4. AS9009  2001:ac8:10:10:185:94:195:15                                         0.0%   138    4.4   6.1   0.6  67.7   9.2
 5. AS9009  vlan2922.as09.tyo1.jp.m247.com (2001:ac8:10:10:193:27:15:143)    0.0%   138    0.7   1.0   0.6  19.3   1.9
 6. AS63473 2406:ef80:4::1                                                      72.5%   138    0.6   0.6   0.5   0.9   0.0
 7. AS63473 2406:ef80:4:xxxx:xxxx:xxxx:xxxx:xxxx                                70.3%   138    0.6   4.1   0.5 133.7  20.8

Does anybody use Advance-1? Could you share a yabs please

Cheers!

Never used magic spam however I have used rspamd

Someone must have experience of both... which is better?

am new to public and internal IP. normally my Plex servers are connected directly via public IP.

in this case there's a public and private IP assigned to the VM and it shows me below, I don't understand. under the VCN security settings I opened TCP 32400 for ingress.

not sure whats missing here.

For doing stuff like put text on top of an image, or change a logo.

As an example, imagine a png logo that's 400 x 160 pixels showing a company name on a uniformly colored background. Suppose I want to resize to 300 x 300. That might require adding additional uniformly colored background top and bottom to get to 400 x 400 and then reducing the size from 400 x 400 to 300 x 300.

Thanks!

@Ympker

I'm afraid he's going to enter a php code and get our customers' details, email, phone numbers.

Is it possible to commit such thefts through the whmcs Payment Gateway module?

How can we protect our site from such a thing?

Is there a way to test it once it is created?

Thanks everyone

In the future as web hosts, are we supposed to have & provide VMs or servers with Dual Stack ? Or the plan is to actually dump IPV4 which is currently still impossible due to multiple reasons.

Wanted to get some advice on files to exclude for plesk backups, we don't want our backups growing exponetially with unwanted files

Is this enough ?

.gz
.jpa
*.log
*.bkup
*.sql
*.tar
*.tar.gz
*.zip
*/com_akeeba/backup/
/core.[0-9]
httpdocs/cache/
softaculous_backups/*
/wp-content/cache/
/wp-content/uploads/wpcf7_captcha/
/wp-content/widget-cache/
.wpress
*/wptsc-cachedir/
/.wysiwygPro_

I tried uploading it on VirusTotal, and indeed it was picked up by many engines.

https://www.virustotal.com/gui/file/9fb98e24e308b0b239fcd89f8a3bd11e63c9eb4219b739fd1e8bf11bec867f3c?nocache=1

Is there a better AV software than ClamAV that can be used to check files on Linux? I don't need realtime protection, just a "please scan this file here" cli. Also, possibly no subscriptions, though I'd be more than happy to buy a software if the price is decent.

Please if anyone knows about Fastspring, share their thoughts on this.

My current host changed their payment option from direct Paypal to Fastspring Paypal.

The problem now :
1. There's a tax now (10%, but not a ​problem)
2. Fastspring add another $10 charge for my transaction using Paypal.

Is this even legal? I never know there will be an addiitonal charge for my transaction (not shown on payment page).

Is it possible to ask for refund for this charge?