ConfigServer Community Forum

Hello, We have a disgruntled customer that specifically created an email address to subscribe it to spam lists/newsletters and then they set up that email address to forward all emails to one of our support emails, creating a large amount of spam that can't really be blocked by traditional means. Th...

Hey,

Just wondering if anyone knows where csf downloads the geoip databases to when it refreshes? Or is it just loaded into a memory stream?

I would like to reference it for another purpose if possible.

Well, I guess it just takes very long to populate the hash tables. After waiting nearly 15 minutes it loaded the... csf: IPSET loading set cc_us with 80332 entries csf: IPSET loading set cc_6_us with 113197 entries ...nearly 200,000 entries in the tables. Increasing the LF_IPSET_HASHSIZE to 2048 and...

Were you ever able to get this working?
Increasing hashsize just led to the restart script hanging instead of erroring out.

A little more info, I'm use maxmind's geoip database on both servers.
I tried switching CC_SRC param to 2 in order to use ipdeny.com databases rather than maxmind to see if it was an issue with maxmind's dbs...unfortunately, this did not help either.

As an addendum, It appears that this bug may be known and bad actors are in the process of exploiting it. It was brought to my attention because I had thousands of failed ssh login attempts from china over the weekend, which would have normally been outright blocked by the cc_ filter (and also my no...

Hello, Over the weekend my servers all failed to load/reload csf using the csf -r command. It appears that the cc_us ip table has gotten massive all of the sudden? It was failing with: csf: IPSET loading set cc_us with 79025 entries IPSET: [ipset v7.1: Error in line 65537: Hash is full, cannot add m...

This would be an excellent addition - perhaps you could allow csf to assume the current cpanel slack configuration? (if that's even possible?) That'd be pretty cool.