Search found 11 matches

by nibb
19 Jul 2022, 23:52
Forum: General Discussion (cxs)
Topic: Block Lists Count
Replies: 0
Views: 2953

Block Lists Count

The docs are not very clear about this. Does it add one IP for each list it founds or for all lists?

There is a big difference because one IP can be in multiple lists. My question is if CSF considers the unique IP before it adds to the block list or just reads all the block lists and adds duplicates.
by nibb
18 Jul 2022, 07:35
Forum: General Discussion (csf)
Topic: Stop Distributed attack emails
Replies: 6
Views: 2334

Re: Stop Distributed attack emails

Email notifications work fine for small volumes but since there is no summary you will get one per each block instead of just one email with all the blocks in a giving time. Not even sure if that is preferable. Technically it's better to use something else but for reports, but this is out of the sco...
by nibb
18 Jul 2022, 07:28
Forum: General Discussion (csf)
Topic: Reporting to abuse lists
Replies: 0
Views: 832

Reporting to abuse lists

I think the documentation is not very explanatory when it comes to the BLOCK_REPORT feature. I suspect more than one person found out that this only works for triggers from LFD after a lot of debugging. This hampers more or less the idea of being able to report abusive IP's or report them because ha...
by nibb
15 May 2020, 21:45
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 92
Views: 1935079

Re: Custom REGEX rules for CSF.

Is there some bug with the latest release?

I noticed that the custom regex does not work on version 14. Same config on servers, except it works on installations running CSF 12 but not 14.
by nibb
13 May 2020, 00:31
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 92
Views: 1935079

Re: Custom REGEX rules for CSF.

Block brute force failed SASL attempts. Debian 9, dovecot / postfix server. Error: Feb 16 08:13:32 mail02 postfix/submission/smtpd[4312]: warning: unknown[85.219.80.99]: SASL PLAIN authentication failed: Edit in /etc/csf/csf.conf: CUSTOM1_LOG = "/var/log/mail.log" Regular expression in /u...
by nibb
10 Apr 2019, 23:10
Forum: Report Bugs (csf)
Topic: new docker support not working
Replies: 2
Views: 5718

Re: new docker support not working

Does this still work for you? I cannot make CSF play nice with Docker. Latest Docker and latest CentOS 7. Initially it seems to work. I can launch containers, restart, etc. But then if I make some change on CSF and restart it, Docker will complain about iptables rules. It seems restarting the Docker...
by nibb
10 Apr 2019, 23:07
Forum: General Discussion (csf)
Topic: Docker Options what do they do?
Replies: 2
Views: 2447

Docker Options what do they do?

What exactly do the options for Docker do in the configuration? There is no documentation for this. Initially they seem to work but I'm not even sure if this is CSF not working at all because once you hit csf -r it seems this breaks something on a permanent basis as you cannot start any container an...
by nibb
10 Apr 2019, 22:54
Forum: General Discussion (csf)
Topic: Missing binary locations
Replies: 1
Views: 2111

Missing binary locations

Default vanilla CentOS 7 minimal installation. After a new CSF installation, executing csf -r you get: *WARNING* Binary location for [HOST] [/usr/bin/host] in /etc/csf/csf.conf is either incorrect, is not installed or is not executable *WARNING* Missing or incorrect binary locations will break csf a...
by nibb
30 Apr 2013, 06:57
Forum: General Discussion (csf)
Topic: Configuration to block SlowLoris
Replies: 2
Views: 3921

Re: Configuration to block SlowLoris

Hello all, I've seen on the forums that I could block a Slowloris attack using Port Flood and Connection Tracking options. What's the recommeded configuration for those options to correctly block the Slowloris attack? Thanks a lot, Rogerio There is no recommended setting, it depend on the attack, (...
by nibb
30 Apr 2013, 06:52
Forum: General Discussion (csf)
Topic: How do I view CSF statiscts on webmin?
Replies: 1
Views: 3111

Re: How do I view CSF statiscts on webmin?

Wondering the same. It seems this is not available in the webmin version. Maybe they make the webmin version a more stripped down version as opposed to the cPanel one. I installed both versions in parallel and indeed the webmin does not have the systems statistics (which I don´t care to much) but th...