ConfigServer Community Forum

Hi

I got today after upgrading to 7.0.1
Error: FASTTART: ip6tables-restore v1.4.7: invalid portrange (min > max), at line 3787 in /usr/sbin/csf

I have disabled faststart and now it is working again.

Is it a bug?

After I upgrade to 7.1 I start received this message:
Error: FASTTART: iptables-restore: line 68174 failed, at line 3759

After upgrade today from 6.X to 7.01 on 3 servers – all servers are virtual root servers running under Debian Wheezy – I'm getting those errors:

csf: FASTSTART loading csf.allow (IPv4)
csf: FASTSTART loading Blocklist OPENBL (IPv4)
Error: FASTTART: iptables-restore: line 6217 failed, at line 3759

csf: FASTSTART loading csf.allow (IPv4)
csf: FASTSTART loading Blocklist SPAMEDROP (IPv4)...

Hi,
there is an issue with CONNLIMIT and PS_LIMIT.

I have set:
CONNLIMIT = 80;20,2095;10

and under PORT SCAN TRACKING:
PS_LIMIT = 10

But blocks for CONNLIMIT are done at 10 and not at 20 on port 80 as specified, this is what LFD reports:

Time: Mon Apr 21 12:12:15 2014 -0500
IP: xx.xx.xx.xx (xx)
Hits: 11
Blocked: Temporary Block

Sample of block hits:
Apr 21 12:11:58 server1 kernel: Firewall:...

I had a maxed out csf.deny

if I then do

csf -d 1.2.3.4/24

it will happily remove do not delete lines

there were clearly other lines available to delete in the csf.deny

mostly auto NETBLOCK and PERMBLOCK, but they were left untouched

Using the variable CC_DENY I've blocked this range of countries

AL,AM,AZ,BA,BD,BG,BN,BY,CN,CZ,DZ,EE,GE,HK,HU,ID,IQ,IR,JP,KG,KH,KR,KZ,LA,LT,MA,MD,MM,MN,MO,MY,NG,OM,PH,PK,PL,RS,SG,SY,TH,TN,TR,TW,UA,VN,YE,ZA,ZM

Now I have a problem, a client can not connect to your provider, he uses the IP: 74.91.18.20

BUT, ip 74.91.18.20 is of USA , and that country is NOT blocked in my range

when I do a search...

Hi,

I've been using CSF for a while now, it's been very useful and it's great at doing its job, but my server also has IPv6 addressing that it needs to have a firewall for. I have CSF's IPv6 firewall enabled and configured, that's working, but I'm having trouble adding IPv6 addresses into its config files.

Addresses I've tried allowing/ignoring:
::1/128
fe80::/10
2601:e:2680:b78::/64
For...

I have updated to 6.44 and was happy to see that now you can add custom ports if LF_SELECT is set to 1 instead of editing /usr/sbin/lfd

I set up custom ports for IMAPD as follows:

PORTS_imapd = 143,993,9993

The problem is that tempbanned gets only 143,993 and 9993 in not on the list at all! I also tried leaving only the port I need, 9993 and still same issue.

I am not even sure how is...

I have been testing it for hours and now could surely say, it's not working the expected way.

I have the following in regex.custom

if (($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /^\ \ \ user (\S*) not found:/)) {
return ( Failed domain.org directory authentication from ,$1, DomainOrgUserNotFound , 3 , 80,443 , 604800 );
}

Despite of settings in custom.regex for port numbers in...

It appears that the ConfigServer firewall doesn't work on systems that call their ethernet ports something else besides eth0 and eth1.

Details:

I'm trying to use ConfigServer firewall on a DirectAdmin based system running on Dell Hardware.

The Dell Hardware names it's ethernet ports em1 & em2 instead of eth0 and eth1.

When I start the firewall the server no longer has access to the Internet,...