Search found 15 matches

by cglmicro
03 Jan 2023, 15:07
Forum: General Discussion (cxs)
Topic: Question regarding suspicious PHP
Replies: 2
Views: 3005

Re: Question regarding suspicious PHP

Thank you Sergio, will check this.
by cglmicro
21 Dec 2022, 21:26
Forum: General Discussion (cxs)
Topic: Question regarding suspicious PHP
Replies: 2
Views: 3005

Question regarding suspicious PHP

Hi guys. I saw your post https://forum.configserver.com/viewtopic.php?t=2985 regarding blocking suspicious PHP files, but I have questions regarding this... I receive batch of emails like this from time to time: Scanning web upload script file... Time : Wed, 21 Dec 2022 13:36:03 -0500 Web referer UR...
by cglmicro
27 May 2021, 14:54
Forum: General Discussion (csf)
Topic: SYSLOG Check failed
Replies: 1
Views: 2465

SYSLOG Check failed

Hi guys. For the last few weeks, every night around 10 PM I receive emails from my LFD: Subject: lfd on XXX.XXX.COM: SYSLOG Check Failed Time: Wed May 26 21:38:05 2021 -0400 Error: Failed to detect code [UmBfg0fwJYwGguMbgpwt9rOC] in SYSLOG_LOG [/var/log/messages] SYSLOG may not be running correctly ...
by cglmicro
03 Sep 2019, 23:59
Forum: General Discussion (csf)
Topic: Exclude host from relay alert
Replies: 3
Views: 3573

Re: Exclude host from relay alert

Never mind, just found out that IP must be in CSF.IGNORE, not just in CSF.ALLOW for it to work.
by cglmicro
03 Sep 2019, 23:47
Forum: General Discussion (csf)
Topic: Exclude host from relay alert
Replies: 3
Views: 3573

Re: Exclude host from relay alert

up... still no suggestion on how to do this?
by cglmicro
12 Jun 2019, 20:12
Forum: General Discussion (csf)
Topic: Exclude host from relay alert
Replies: 3
Views: 3573

Exclude host from relay alert

Hi guys. Fantastic product by the way. I want some host to be excluded from the RELAY ALERT I'm receiving. These are the IP of my mail filters. I don't want to increase the RT_RELAY_LIMIT so I can keep alerted if another IP is abusing. Here is the alert I'm receiving: Time: Wed Jun 12 10:47:22 2019 ...
by cglmicro
21 Apr 2017, 20:50
Forum: General Discussion (csf)
Topic: Process Tracking Emails
Replies: 7
Views: 6859

Re: Process Tracking Emails

Thank you, I just added
exe:/opt/cpanel/ea-php56/root/usr/bin/php-cgi
by cglmicro
18 Apr 2017, 01:50
Forum: General Discussion (csf)
Topic: cPanel root access alert exception
Replies: 7
Views: 5702

Re: cPanel root access alert exception

I double check and you were right !! My IP was no longer in the csf.ignore.
I've added it again and no more email when I log in. Thanks !!
by cglmicro
17 Apr 2017, 21:21
Forum: General Discussion (csf)
Topic: cPanel root access alert exception
Replies: 7
Views: 5702

Re: cPanel root access alert exception

In fact, when I log in WHM, or when I log in SSH in terminal, I receive this email: I might consider a rule in my Outlook. Yes my CSF+LFD was restarted since I added my IP to this file months ago when I installed CSF.

Thank you.
by cglmicro
17 Apr 2017, 21:17
Forum: General Discussion (csf)
Topic: Process Tracking Emails
Replies: 7
Views: 6859

Re: Process Tracking Emails

I saw this answer in another thread, and it bring another question: This line won't ignore every alerts regarding PHP scripts, or just affect this single alert ?