Search found 7 matches

by webjive
20 Aug 2019, 17:03
Forum: General Discussion (csf)
Topic: Is this a DOS, or not DOS?
Replies: 0
Views: 2555

Is this a DOS, or not DOS?

I keep seeing dozens, sometimes hundreds of class B or C IP's coming to the server with 1 connection with no real performance impact. I never let them stay connected long enough (or they don't) to dig deep into what they are actually doing (I need to thought). My question is, is there a setting in C...
by webjive
11 Nov 2015, 15:45
Forum: General Discussion (csf)
Topic: Login Failure Daemon or Login Tracking?
Replies: 7
Views: 6911

Re: Login Failure Daemon or Login Tracking?

P.S. Now, I'm scratching my head on this part of the CSF custom file Example: # if (($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /^\S+\s+\d+\s+\S+ \S+ pure-ftpd: \(\?\@(\d+\.\d+\.\d+\.\d+)\) \[WARNING\] Authentication failed for user/)) { # return ("Failed myftpmatch login from",$1,&quo...
by webjive
11 Nov 2015, 15:39
Forum: General Discussion (csf)
Topic: Login Failure Daemon or Login Tracking?
Replies: 7
Views: 6911

Re: Login Failure Daemon or Login Tracking?

Thanks!! This seems to do the trick

/\[file \"\/var\/cpanel\/cwaf\/rules\/09_Bruteforce_Bruteforce.conf\"\]/g
by webjive
11 Nov 2015, 14:35
Forum: General Discussion (csf)
Topic: Login Failure Daemon or Login Tracking?
Replies: 7
Views: 6911

Re: Login Failure Daemon or Login Tracking?

I know this is an old thread but, we're having the same issue now. We've been mitigating DDOS attacks and the attackers have moved to the Joomla admin login where Comodo WAF is catching this but, just returns a 403 after that still allowing the attacker to use up Apache resources. It would be great ...
by webjive
05 Nov 2013, 07:21
Forum: General Discussion (csf)
Topic: use CSF to block all ips except for 2 or 3
Replies: 1
Views: 2713

Re: use CSF to block all ips except for 2 or 3

Add your IP's to the csf.allow via the interface and you won't be blocked.
by webjive
02 May 2013, 00:34
Forum: MailScanner
Topic: clamavconnector disturbed mailscanner
Replies: 4
Views: 5744

Re: clamavconnector disturbed mailscanner

I had the same issue and it was a full /var issue. Old logs lying around. Caused a fantom issue for us.
by webjive
11 Jan 2013, 14:17
Forum: General Discussion (cxs)
Topic: cron question
Replies: 2
Views: 5367

Re: cron question

I had this same question and this will help:

http://www-dot-centos-dot-org/docs/5/ht ... tasks.html

Replace the dot with real dots. The forums here didn't allow me to add a URL. Go figure...