Search found 17 matches

Search found 17 matches Page 1 of 2
by LukeDouglas
26 Mar 2019, 22:23
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 51
Views: 57566

I was looking at this thread as I use UptimeRobot for all of my client websites that I host on my server. # MJ12-Bot / Baidu / Ahrefs if (($globlogs{CUSTOM2_LOG}{$lgfile}) and ($line =~ /(\S+).*\"*(?:GET|POST|HEAD).* (MJ12bot|Baiduspider|AhrefsBot|UptimeRobot).*/)) { return ("LFD - MJ12-Baidu-Ahrefs...
by LukeDouglas
26 Mar 2019, 22:04
Forum: General Discussion (csf)
Topic: Whitelisted IP being blocked
Replies: 3
Views: 296

I have setup MyJoomla to help manage my Joomla websites. Part of their service is setting up uptime monitors via UptimeRobot.com. I whiltelisted the IP addresses for both services: 178.62.5.35 # Manually allowed MyJoomla: (England) - Tue Mar 20 14:50:59 2019 DO NOT DELETE 178.62.31.185 # Manually al...
by LukeDouglas
26 Mar 2019, 22:00
Forum: General Discussion (csf)
Topic: chkproc: Warning: Possible LKM Trojan installed
Replies: 3
Views: 331

Thanks!

How would I know that these are a 'false positive'?
by LukeDouglas
26 Mar 2019, 16:27
Forum: General Discussion (csf)
Topic: chkproc: Warning: Possible LKM Trojan installed
Replies: 3
Views: 331

I have received a few emails over the past few weeks similar to the following content. Can someone tell me if this is a serious issue and what I can do to fix it. find: `/proc/5049': No such file or directory find: `/proc/5799': No such file or directory find: `/proc/5801': No such file or directory...
by LukeDouglas
09 Jan 2019, 20:31
Forum: General Discussion (cxs)
Topic: Ignore "[\/proc\/self\/environ]" expressions
Replies: 0
Views: 266

Can anyone outline how to configured ConfigServer to ignore all [\/proc\/self\/environ] expressions? I get tons of emails with things like this: ----------- SCAN REPORT ----------- TimeStamp: Thu, 3 Jan 2019 00:00:03 -0700 (/usr/sbin/cxs --allusers --nobayes --clamdsock /var/clamd --ctime 25 --dbrep...
by LukeDouglas
09 Jan 2019, 20:29
Forum: General Discussion (cxs)
Topic: Ignoring resources via cxs.ignore
Replies: 4
Views: 2070

by NielsH » 03 Jul 2015, 12:14 In the end I just had to do match:symlink\s*\( - that worked fine. It was my bad for not including the cxs.ignore file properly so it didn't actually ignore it. NielsH, I know this is an old thread but can you outline how you configured ConfigServer to ignore all syml...
by LukeDouglas
09 Jan 2019, 19:55
Forum: General Discussion (csf)
Topic: Lfd email alerts issue
Replies: 1
Views: 481

Aaron,

I'm getting about 40-50 emails daily from ConfigServer Firewall. It seems there is no one monitoring these forums as there hasn't been a reply to your post in almost two years. I, myself, would like to know the answer to your question. :(
by LukeDouglas
07 Jul 2017, 16:32
Forum: MailScanner Front-End
Topic: Server Hostname Change
Replies: 2
Views: 1066

Sarah,

Thanks for the quick update! I kind of figured that but just wanted to confirm. :)

Technology is great.........when it works!

Luke
by LukeDouglas
07 Jul 2017, 16:08
Forum: MailScanner Front-End
Topic: Server Hostname Change
Replies: 2
Views: 1066

I am in the process of changing my server hostname from a .COM to a .NET. In my ConfigServer MailScanner Front-End, it has the .COM in both the %org-long-name% and %web-site%. My .COM is still my organization website as the .NET has no website. Should I leave this as is or change to the .NET?
by LukeDouglas
18 May 2017, 07:56
Forum: General Discussion (csf)
Topic: WannaCry Ransomware
Replies: 0
Views: 624

Are there any changes we should make to our ConfigServer firewall on our server in regards to the National Cyber Awareness Systems notificate about the "TA17-132A: Indicators Associated With WannaCry Ransomware" that has been attacking computer systems and servers worldwide?
Search found 17 matches Page 1 of 2