Search found 197 matches

by marcele
03 Sep 2023, 09:36
Forum: Report Bugs (csf)
Topic: CSF blocking own short IPv6 address on Centos 8
Replies: 4
Views: 7172

Re: CSF blocking own short IPv6 address on Centos 8

Just a follow up that CT_LIMIT is still blocking the servers own IP address. This was from an AlmaLinux 9 server running csf: v14.19 (generic): Sep 3 04:25:48 www0 lfd[2282494]: (CT) IP 158.69.XXX.XXX (CA/Canada/www0.example.com) found to have 858 connections - *Blocked in csf* for 1800 secs [CT_LIM...
by marcele
24 Aug 2023, 17:01
Forum: Suggestions (csf)
Topic: MaxMind DB must be HTTPS starting October
Replies: 10
Views: 7818

MaxMind will begin requiring HTTPS for GeoIP download requests

MaxMind will require https:// for all database downloads. Currently CSF uses unsecure http:// in Config.pm Email sent from MaxMind: Dear MaxMind customer, We’re writing because, between July 15 and August 14, we saw GeoIP download requests from your account that are not being sent with HTTPS (see de...
by marcele
24 Aug 2023, 11:10
Forum: Report Bugs (csf)
Topic: Issue with Messenger v3 and fix for AlmaLinux 8 and 9
Replies: 2
Views: 2372

Re: Issue with Messenger v3 and fix for AlmaLinux 8 and 9

Unfortunately this isn't fixed like the CSF 14.19 changelog says. I've confirmed this on Almalinux and CloudLinux: # csf --version csf: v14.19 (generic) When I delete the `/home/csf/public_html/` directory and restart the login failure daemon everything gets re-created but the .htaccess is missing t...
by marcele
19 Aug 2023, 09:49
Forum: General Discussion (csf)
Topic: Cluster master does not sync to slaves
Replies: 1
Views: 844

Re: Cluster master does not sync to slaves

This is what works well for us. You have to tell the slaves to send to one another so the cluster config is the same across all of the slaves: MASTER: 192.168.1.2 SLAVE1: 192.168.1.3 SLAVE2: 192.168.1.4 CLUSTER_SEND_TO: 192.168.1.3,192.168.1.4 CLUSTER_RECEIVE_FROM: 192.168.1.2,192.168.1.3,192.168.1....
by marcele
31 Jul 2023, 12:24
Forum: Report Bugs (csf)
Topic: Issue with Messenger v3 and fix for AlmaLinux 8 and 9
Replies: 2
Views: 2372

Re: Issue with Messenger v3 and fix for AlmaLinux 8 and 9

Just a note that this was unfortunately not fixed in CSF v14.19.
by marcele
17 Jul 2023, 11:29
Forum: Report Bugs (csf)
Topic: Issue with Messenger v3 and fix for AlmaLinux 8 and 9
Replies: 2
Views: 2372

Issue with Messenger v3 and fix for AlmaLinux 8 and 9

Something changed in the latest on AlmaLinux 8.8 and 9.2 so the messenger v3 service wasn't working when you accessed it: [Mon Jul 17 04:18:06.481590 2023] [authz_core:error] [pid 1561524:tid 140582131332864] [client 207.194.202.202:62109] AH01630: client denied by server configuration: /home/csf/pu...
by marcele
01 Jul 2023, 08:05
Forum: General Discussion (csf)
Topic: Debian 12 - LFD doesn't read logs
Replies: 8
Views: 2360

Re: Debian 12 - LFD doesn't read logs

Regex patterns are stored in /usr/local/csf/lib/ConfigServer/RegexMain.pm. It's pretty easy to do some failed logins then test the regex using the matching pattern in that file. Then you can use a website like https://regex101.com/ to see if the pattern works. Can you post some sample failed logins ...
by marcele
29 Jun 2023, 08:55
Forum: General Discussion (csf)
Topic: Debian 12 - LFD doesn't read logs
Replies: 8
Views: 2360

Re: Debian 12 - LFD doesn't read logs

My guess is that it might be related to this then: Users may change to journalctl or use the new "high precision timestamps" that rsyslog now uses. If the timestamp format has changed then the regex that CSF uses would have to account for that. Unfortunately that also means that you would ...
by marcele
28 Jun 2023, 11:56
Forum: General Discussion (csf)
Topic: Debian 12 - LFD doesn't read logs
Replies: 8
Views: 2360

Re: Debian 12 - LFD doesn't read logs

Most OS are switching to using journald instead of rsyslog. If you look at the Debian 12 announcement you will see this: https://www.debian.org/News/2023/20230610 Quote: There are some changes to system logging; the rsyslog package is no longer needed on most systems, and is not installed by default...
by marcele
08 Nov 2022, 07:36
Forum: Suggestions (csf)
Topic: Add journald support
Replies: 1
Views: 3820

Re: Add journald support

You should note that you wouldn't even have to change any regex as you can use the "short" output to match syslog: Example: View postfix logs: journalctl --no-pager --quiet --unit='postfix' --since='2022-10-30 00:00:00' --until='2022-11-06 23:59:59' --output='short' If you only want to vie...