Search found 15 matches
- 03 Jan 2023, 15:07
- Forum: General Discussion (cxs)
- Topic: Question regarding suspicious PHP
- Replies: 2
- Views: 3956
Re: Question regarding suspicious PHP
Thank you Sergio, will check this.
- 21 Dec 2022, 21:26
- Forum: General Discussion (cxs)
- Topic: Question regarding suspicious PHP
- Replies: 2
- Views: 3956
Question regarding suspicious PHP
Hi guys. I saw your post https://forum.configserver.com/viewtopic.php?t=2985 regarding blocking suspicious PHP files, but I have questions regarding this... I receive batch of emails like this from time to time: Scanning web upload script file... Time : Wed, 21 Dec 2022 13:36:03 -0500 Web referer UR...
- 27 May 2021, 14:54
- Forum: General Discussion (csf)
- Topic: SYSLOG Check failed
- Replies: 1
- Views: 3249
SYSLOG Check failed
Hi guys. For the last few weeks, every night around 10 PM I receive emails from my LFD: Subject: lfd on XXX.XXX.COM: SYSLOG Check Failed Time: Wed May 26 21:38:05 2021 -0400 Error: Failed to detect code [UmBfg0fwJYwGguMbgpwt9rOC] in SYSLOG_LOG [/var/log/messages] SYSLOG may not be running correctly ...
- 03 Sep 2019, 23:59
- Forum: General Discussion (csf)
- Topic: Exclude host from relay alert
- Replies: 3
- Views: 3643
Re: Exclude host from relay alert
Never mind, just found out that IP must be in CSF.IGNORE, not just in CSF.ALLOW for it to work.
- 03 Sep 2019, 23:47
- Forum: General Discussion (csf)
- Topic: Exclude host from relay alert
- Replies: 3
- Views: 3643
Re: Exclude host from relay alert
up... still no suggestion on how to do this?
- 12 Jun 2019, 20:12
- Forum: General Discussion (csf)
- Topic: Exclude host from relay alert
- Replies: 3
- Views: 3643
Exclude host from relay alert
Hi guys. Fantastic product by the way. I want some host to be excluded from the RELAY ALERT I'm receiving. These are the IP of my mail filters. I don't want to increase the RT_RELAY_LIMIT so I can keep alerted if another IP is abusing. Here is the alert I'm receiving: Time: Wed Jun 12 10:47:22 2019 ...
- 21 Apr 2017, 20:50
- Forum: General Discussion (csf)
- Topic: Process Tracking Emails
- Replies: 7
- Views: 6970
Re: Process Tracking Emails
Thank you, I just added
exe:/opt/cpanel/ea-php56/root/usr/bin/php-cgi
exe:/opt/cpanel/ea-php56/root/usr/bin/php-cgi
- 18 Apr 2017, 01:50
- Forum: General Discussion (csf)
- Topic: cPanel root access alert exception
- Replies: 7
- Views: 5756
Re: cPanel root access alert exception
I double check and you were right !! My IP was no longer in the csf.ignore.
I've added it again and no more email when I log in. Thanks !!
I've added it again and no more email when I log in. Thanks !!
- 17 Apr 2017, 21:21
- Forum: General Discussion (csf)
- Topic: cPanel root access alert exception
- Replies: 7
- Views: 5756
Re: cPanel root access alert exception
In fact, when I log in WHM, or when I log in SSH in terminal, I receive this email: I might consider a rule in my Outlook. Yes my CSF+LFD was restarted since I added my IP to this file months ago when I installed CSF.
Thank you.
Thank you.
- 17 Apr 2017, 21:17
- Forum: General Discussion (csf)
- Topic: Process Tracking Emails
- Replies: 7
- Views: 6970
Re: Process Tracking Emails
I saw this answer in another thread, and it bring another question: This line won't ignore every alerts regarding PHP scripts, or just affect this single alert ?