ConfigServer Community Forum

Hi,

When i check csf (check server security), i get this ntice:
Check telnet port 23 is not in use

I have removed telnet by yum remove telnet and port 23 is in block list.

what should i do to find out why this notice has been appeared ?

by the way, I'm using centos 7 and directadmin and there are update.

I'm set up a SoftetherVPN server on Linux Server and create a local Tap Device, bound DHCP server on the device.
If I disable CSF, client users can get IP by DHCP normal. But when enable CSF, a client can't request an IP. So, how do I allow DHCP on CSF?

it turns out that on the PC of the physical firewall I have CSF installed to control all incoming traffic, and from there I route the ports to different applications located on other machines to the rest of the lan.

It turns out that the IPs of all the clients that connect to these applications on different ports and machines of the lan, all appear with our IP WAN and different connection...

Hello friends,
I block everything from CN using the option we have Country Code Lists and Settings

but I wanted to release only one domain that use CN server

example domain: sepco1.com

does anyone know how i can do this?

Hi,
How to filter IPs that connect to the Linux server

Hi,
How to filter IPs that connect to the Linux server
For this I have configured CC_Allow = CL, CL being the code of my country Chile.
However, this configuration does not work, because it continues to block IP SMTP, IP POP, IP CPANEL.

1) I wish I could block only access to cpanel from all countries.
2) And I will free the IPs of my...

Hello,

On our server LFD fails because of:

Log line flooding/looping in /etc/apache2/logs/error_log

When Litespeed restarts, because of this lines in /etc/apache2/logs/error_log:

Processing config file: /etc/apache2/conf.d/userdata/lscache_vhosts.conf
Processing config directory: /etc/apache2/conf.d/userdata
Processing config file: /etc/apache2/conf.d/userdata/lscache_vhosts.conf...

Hi ConfigServer Team and User Friends,

Two days ago, there was a CSF update from v14.01 to 14.02 in my WHM and I got the automatic CSF update email. In the CSF update email, near the bottom line (...All done.), I saw this:

PID file /run/lfd.pid not readable (yet?) after start.

Is this normal or not? If not, how to fix the problem?

Is this a cause why after I manually add IPs and IP ranges...

Config:
OS: Centos 7.7
csf: 14.02
ipset: yes, enabled

Problem:
In config, i enable CC_ALLOW_PORTS to specific country, and list the CC_ALLOW_PORTS_TCP ports. When i restart csf and lfd, i cant reach the specific port from the blocked countries, but after some time, i can.

Example:
CC_ALLOW_PORTS: US
CC_ALLOW_PORTS_TCP: 22

After csf restart, i cant connet to ssh from a host in the US, but some...

So I've built this custom lfd in custom.regex.pm:

if (($globlogs{CUSTOM9_LOG}{$lgfile}) and ($line =~ /^ {2} \d{2} \d{2}:\d{2}:\d{2} Invalid user login booting from (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})/)) {
return ( Failed booting login from ,$1, booting ,${LF_CUSTOMLOGIN}, 80,443,8443 ,${LF_CUSTOMLOGIN_PERM});
}

In csf.conf I have these variables set:

CUSTOM9_LOG = /var/log/customsecure...

All csf commands on this server appear to hang, for example:

`csf -r`
`csf -g $IP`
`csf -x`

A strace doesn't show anything useful:

```
# ps aux | grep csf
root 2234908 8.2 0.0 169596 21016 pts/2 S+ 11:34 0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf -v
root 2234932 0.0 0.0 114760 968 pts/0 S+ 11:34 0:00 grep --color=auto csf
# strace -p 2234908
strace: Process 2234908 attached...

I'm seeing this every time I restart lfd:

● lfd.service - ConfigServer Firewall & Security - lfd
Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled)
Active: active (running) since Sat 2020-03-28 09:47:35 EDT; 3ms ago
Process: 21413 ExecStart=/usr/sbin/lfd (code=exited, status=0/SUCCESS)
Main PID: 21426 (lfd - starting)
CGroup: /system.slice/lfd.service...

Hi guys,

i have a problem. When CSF activated i encounter cloudflare 522 error. I also added the cloudflare ip addresses to CSF whitelist but my problem isnt solved yet. By the way, for example, you get this error when you are surfing on the web site. When you refresh the page, the error is dissappear and then you continue to the website from where you left off.

When i deactivated CSF, i never...

Is it necessary to remove firewalld for CSF to work properly or can they both be together and active?

I installed successfully. I have not yet turned off testing. I don't want to turn it off until I see that it's working but I don't know if not turning it off could be the cause of the errors.
I am getting these errors when Restarting CSF:

Job for lfd.service failed because a fatal signal was delivered to the control process. See systemctl status lfd.service and journalctl -xe for details....

In the firewall settings it say:
Testing flag - enables a CRON job that clears iptables incase of
configuration problems when you start csf. This should be enabled until you
are sure that the firewall works
So, how do I test the firewall to make sure it works before I set testing to Off?
Is there a way to test its functionality?

I try combine Firewall and Laravel. Is it possible to install Firewall as a separate installation and not as a cPanel installation?

I try to control Firewall settings within one application.

Is this technically possible?

Hello,

21 port is enabled on my server but when I run the command:

# nmap -p 21,22,80,443 x.x.x.x

Starting Nmap 6.40 ( ) at 2020-03-22 12:22 +0530
Nmap scan report for server1.xxxxxxxxxx.com (x.x.x.x)
Host is up (0.000079s latency).
PORT STATE SERVICE
21/tcp closed ftp
22/tcp open ssh
80/tcp open http
443/tcp open https

Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds
#

Anyone...

Via email I get the following notifications (hundreds a day):

Time: Mon Mar 2 02:16:07 2020 +0000
Account: mailman
Resource: Process Time
Exceeded: 17249 > 10000 (seconds)
Executable: /usr/bin/python2.7
Command Line: /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
PID: 8576 (Parent PID:8549)
Killed: No

I have added the following lines to my csf pignore...

I have just installed and completed setup latest configserver on a vps running centos 7.
I can receive email lfd on myhost: Excessive Resource Usage,
but I see no other email like SSH Login Alert, Firewall block etc.
What am i missing? Please help. Thanks in advance.

Hi CSF Team and Friends,

I'm using ConfigServer Security & Firewall - csf v14.02 , and using CENTOS 7.6 Linux and WHM/cPanel.

I've manually added some hacking IPs and IP ranges in /etc/csf/csf.deny but later I've found that the added IPs and IP ranges are not blocked. Those IPs can still directly go to my website. Why? What is the most possible cause(s)?

Really need help here.

Thank you very...