Search found 10 matches

by bendix
14 Dec 2021, 21:51
Forum: General Discussion (csf)
Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Replies: 5
Views: 2077

Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15

Thank you Sergio, but this will not work for me. I need this bug fixed for good.
by bendix
12 Dec 2021, 15:06
Forum: General Discussion (csf)
Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Replies: 5
Views: 2077

Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15

I've also set:

Code: Select all

LF_ALERT_TO = ""
but send the email anyway to root@localhost.

Any help is appreciated.
by bendix
12 Dec 2021, 14:36
Forum: General Discussion (csf)
Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Replies: 5
Views: 2077

Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15

I totally restarted csf and lfd after each modification. I still get SUDO alerts, what do you need to debug this? Here is csf.conf: TESTING = "0" TESTING_INTERVAL = "5" RESTRICT_SYSLOG = "3" RESTRICT_SYSLOG_GROUP = "mysyslog" RESTRICT_UI = "1" AUTO_U...
by bendix
09 Dec 2021, 18:07
Forum: General Discussion (csf)
Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Replies: 5
Views: 2077

LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15

Hi, LF_SUDO_EMAIL_ALERT = "0" is ignored. I have some scripts that use sudo to be executed, and I got a lot of emails even if the variable is set to 0. lfd on srv1: SUDO login alert - Successful login from user1(uid=0) to user2 I've added UID 0 to csf.uidignore but still no working.. Can y...
by bendix
12 Nov 2016, 07:49
Forum: General Discussion (csf)
Topic: PS_INTERVAL set to 0 don't work on v9.27
Replies: 4
Views: 3585

Re: PS_INTERVAL set to 0 don't work on v9.27

Here is my configuration: TESTING = "0" TESTING_INTERVAL = "5" RESTRICT_SYSLOG = "0" RESTRICT_SYSLOG_GROUP = "mysyslog" RESTRICT_UI = "1" AUTO_UPDATES = "1" LF_SPI = "1" TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,953,993...
by bendix
11 Nov 2016, 21:08
Forum: General Discussion (csf)
Topic: PS_INTERVAL set to 0 don't work on v9.27
Replies: 4
Views: 3585

Re: PS_INTERVAL set to 0 don't work on v9.27

So PS_INTERVAL="0" doesn't work? There is no way to disable Port Scan Tracking at all or for a single port?
by bendix
11 Nov 2016, 18:46
Forum: General Discussion (csf)
Topic: PS_INTERVAL set to 0 don't work on v9.27
Replies: 4
Views: 3585

PS_INTERVAL set to 0 don't work on v9.27

Hi, Because firewall is blocking some unwanted IPs that is trying to access for example port 8080: Nov 11 18:19:25 srv1 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=XXX SRC=XXX DST=XXX LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=26111 DF PROTO=TCP SPT=63838 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0 N...
by bendix
13 May 2013, 17:54
Forum: Suggestions (cxs)
Topic: Hidden iframes
Replies: 3
Views: 7261

Hidden iframes

Hi,

Can you please add hidden iframes on "Regular expression match"?

I found this:

Code: Select all

<iframe src="http://boogyman.biz.ua/?1" width="0" height="0" frameborder="0"></iframe>
and was not detected in any way by cxs.

Thank you.
by bendix
10 Aug 2012, 21:00
Forum: Suggestions (cxs)
Topic: Send mail to scripts owner (victims)
Replies: 13
Views: 31995

Re: Send mail to scripts owner (victims)

+1 on this too
by bendix
05 Mar 2012, 10:47
Forum: Suggestions (cxs)
Topic: cxs for webmin?
Replies: 1
Views: 4739

cxs for webmin?

Hi,

Can you tell me if cxs will be available for webmin too? Like csf?

If yes, when?

Thank you!