Search found 23 matches

by geekytone
01 Mar 2024, 08:50
Forum: General Discussion (csf)
Topic: CSF SMTP Auth Blocking Issue for Mailgun
Replies: 4
Views: 608

Re: CSF SMTP Auth Blocking Issue for Mailgun

Yes, all IP listed in csf.allow can bypass the SMTP_BLOCK. You can just add on csf.allow the following:

Code: Select all

tcp|out|d=587|d=1.2.3.4
tcp|in|s=587|s=1.2.3.4
(Don't forget to replace 1.2.3.4 with your server's IP address, and eventually replace the 587 port with your accurate port number)
by geekytone
23 Feb 2024, 08:19
Forum: General Discussion (csf)
Topic: CSF SMTP Auth Blocking Issue for Mailgun
Replies: 4
Views: 608

Re: CSF SMTP Auth Blocking Issue for Mailgun

Hello, Check the "SMTP_BLOCK" settings which block the outgoing SMTP ports (defined by SMTP_PORTS settings) for users (then only the local SMTP server like postfix or exim is allowed to connect to external SMTP). If you are using cPanel, check also if external SMTP is correctly allowed on ...
by geekytone
22 Feb 2024, 10:11
Forum: General Discussion (csf)
Topic: How to unblock IP blocked by LFD on a blocklist
Replies: 1
Views: 219

How to unblock IP blocked by LFD on a blocklist

Hello, I see one IP address blocked on CSF: # csf -g xxx.xxx.xxx.xxx (...) IPSET: Set:bl_CXS_LF_HTACCESS Match:xxx.xxx.xxx.xxx Setting:CXS_LF_HTACCESS file:/etc/csf/csf.blocklists (....) As I see on LFD log, the IP was blocked by LFD for htpasswd fail. However, I'm unable to unblock it from SSH by &...
by geekytone
14 Dec 2023, 16:37
Forum: Suggestions (cxs)
Topic: Ability to exclude signatures on cxs.ignore
Replies: 0
Views: 5444

Ability to exclude signatures on cxs.ignore

Hello,

As title said, an regex / full text signature exclusion on cxs.ignore would be very nice.

Sample use case: you are on cPanel, you only have one ClamAV, you want to scan emails with specifics commercial signatures to detect spams, but these signatures trigger false positives on files.
by geekytone
27 Nov 2023, 09:30
Forum: General Discussion (csf)
Topic: Unable to whitelist Varnish from LFD Suspicious File Alert
Replies: 0
Views: 9248

Unable to whitelist Varnish from LFD Suspicious File Alert

Hello, Currently, I get a ton of emails like this: lfd on [hostname]: Suspicious File Alert Time: Mon Nov 27 10:17:20 2023 +0100 File: /tmp/xxxxxxxx.o Reason: Linux Binary Owner: varnish:varnish (xxx:xxx) Action: No action taken These files are created by Varnish when it compiles the VCL for reloadi...
by geekytone
07 Sep 2023, 13:45
Forum: General Discussion (csf)
Topic: How to force to reload a blocklist?
Replies: 4
Views: 1262

Re: How to force to reload a blocklist?

Sergio wrote: 06 Sep 2023, 15:00 yes, in CSF are the instructions for this:
Hello,

Thank you for your help, it works.
by geekytone
06 Sep 2023, 10:06
Forum: General Discussion (csf)
Topic: How to force to reload a blocklist?
Replies: 4
Views: 1262

How to force to reload a blocklist?

Good morning, We currently have a custom blocklist and we managed to implement a webui for asking an unblock. But as the blocklist can only be reloaded each 3600s, the user have to wait a maximum time of 3600s to get unblocked. Is there a way to trigger a blocklist reload within CSF/LFD from SSH? In...
by geekytone
04 Feb 2022, 15:03
Forum: MailScanner
Topic: Disable MailScanner storing messages using Ansible
Replies: 0
Views: 1090

Disable MailScanner storing messages using Ansible

Good morning,

Is there any API or CLI command to disable MailScanner storing messages? At this time, I know only the way using MSFE > MailControl Performance.
by geekytone
19 May 2021, 13:12
Forum: General Discussion (cxs)
Topic: CXS High CPU Load and Clamd
Replies: 3
Views: 3930

Re: CXS High CPU Load and Clamd

Good morning,

I put limits on systemd to limit ClamAV usage with CXS. For that, I created the file /etc/systemd/system/clamd.service.d/limits.conf with following content:

Code: Select all

[Service]
IOSchedulingPriority = 7
CPUQuota = 30%
by geekytone
17 May 2021, 08:23
Forum: General Discussion (cxs)
Topic: Cron weekly - Save multiple logs
Replies: 0
Views: 3279

Cron weekly - Save multiple logs

Good morning, I've set weekly scan on my cPanel server with CXS. At this time, the log is stored at "/var/log/cxsreports/cxs.scan". As I see, this file is erased after each new scan. Is there a way to set a new logfile per scan (such as "/var/log/cxsresports/cxs-20210517.scan") ?...