Search found 11 matches

by prabudh
07 Nov 2008, 20:26
Forum: Report Bugs (csf)
Topic: tons of mails with same IP blocked
Replies: 7
Views: 4422

Gizzmo, Even if its stopped you shouldn't be using port 22, cpanel account Transfer work fine even if you have SSH running on non-standard port. TDE you should DENY any offending IP from Root WHM-->CSF--Deny IP Blocking them from cPanel will only block them on your domain, not on SSH and other servi...
by prabudh
07 Nov 2008, 09:31
Forum: Report Bugs (csf)
Topic: tons of mails with same IP blocked
Replies: 7
Views: 4422

Are you running ssh on default port (22, not recommended),

with so many failures i would certainly change the SSH port to a new one.
by prabudh
27 Jun 2008, 07:02
Forum: Report Bugs (csf)
Topic: squirrelmail is reported as Suspicious Process
Replies: 2
Views: 3820

squirrelmail is reported as Suspicious Process

Upgraded 3 servers to latest CSF and all of them report Suspicious process when users are accessing email using squirrelmail . Time: Fri Jun 27 00:25:46 2008 PID: 20395 Account: dxxxnd Uptime: 161 seconds Executable: /usr/local/cpanel/3rdparty/bin/php-cgi Command Line (often faked in exploits): /usr...
by prabudh
08 Jan 2008, 17:56
Forum: Report Bugs (csf)
Topic: root ssh alert ignored ????
Replies: 6
Views: 5081

lfd will ignore any ip's that you have listed in csf.ignore, any global ignore file is setup and any ip in /etc/relayhosts at the time if you have the RELAYHOSTS option enabled. thanks for the reply, iam not an expert but think this option is expecting any of IP in relayhost as trusted user. ignori...
by prabudh
06 Jan 2008, 14:19
Forum: Report Bugs (csf)
Topic: root ssh alert ignored ????
Replies: 6
Views: 5081

root ssh alert ignored ????

upgraded to v3.01 and now the server doesn't mails the login alert, happening on 2 of my servers csf log shows:- Sun Jan 5 07:45:49 2008 lfd: *SSH login* from xx.xx.119.245 into the root account using password authentication - ignored nothing else has been changed on the server. on other boxes runni...
by prabudh
30 Apr 2007, 09:31
Forum: Report Bugs (csf)
Topic: Is it a Bug or it normal
Replies: 1
Views: 2460

Is it a Bug or it normal

hi, I've few IP's of customer which are in the "allowed IP" List still i get the Lfd blocked notification mail for those failed logins as :- Failures: 8 (ftpd) Interval: 135 seconds Blocked: Yes Blocked: Yes confuses and needs to re-check it from csf menu. shouldn't this have something like which re...
by prabudh
20 Jan 2007, 08:49
Forum: Suggestions (cmq)
Topic: Auto delete older bounced emails
Replies: 18
Views: 24692

try Cron job Clean Mail Queue script
thanx
pk
by prabudh
18 Dec 2006, 11:52
Forum: MailScanner
Topic: Mail scanner Renaming our forms when sending them as email
Replies: 2
Views: 3185

thanks sarah

thanks sarah, I'll give this a try and let you know if problem persist.

Thanks for your excellent advice.

regards,
pk
by prabudh
18 Dec 2006, 06:35
Forum: MailScanner
Topic: Mail scanner Renaming our forms when sending them as email
Replies: 2
Views: 3185

Mail scanner Renaming our forms when sending them as email

hi, we have cs mailscanner thing running on our server but when ever a form is sent by email to our customers for feedback its getting renamed. check the form code below. <MAILSCANNERFORM6611 method="post" action="http://www.oursite.com/mailer-Dec/mailer-Dec.php" name="form1" FORM> </MAILSCANNERFORM...
by prabudh
15 Dec 2006, 17:59
Forum: Report Bugs (csf)
Topic: php open_basedir Confusion
Replies: 2
Views: 3890

yes httpd.conf does have this but php.ini says no value

sir,
thanks for you kind attention i was just thinking why does php.ini still says "no value"

hoever http.conf does have
<IfModule mod_php4.c>
php_admin_value open_basedir "/home/pratap/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>

regards,
pk