Search found 16 matches

by Linuxlover
29 Mar 2021, 20:59
Forum: General Discussion (csf)
Topic: CSF not responding to bruteforce attacks
Replies: 0
Views: 784

CSF not responding to bruteforce attacks

Hello, my /usr/local/cpanel/logs/login_log is full of failed whm login attempts from ip addresses in verry strange countrys but it looks like the "attackers" know the defending mechanism against this type of attack because they stop after two failed attempts and a few hours hours later the...
by Linuxlover
09 Nov 2020, 12:35
Forum: General Discussion (csf)
Topic: Issue with the alert emails being send by csf
Replies: 7
Views: 1201

Re: Issue with the alert emails being send by csf

Hello,

Problem is still there even after setting CC_SRC = "2".Csf emails me that 194.26.25.126 is blocked it reports that ip as (US/United States/California/Los Angeles/-) however that should be (RU/Russia/Moscow/-).
by Linuxlover
05 Nov 2020, 10:09
Forum: General Discussion (csf)
Topic: frequent port scanning
Replies: 1
Views: 462

Re: frequent port scanning

Hello, No a server needs a public ip people can obtain it and thus scan your server.I understand your issue is annoying but blocking whole countries will have it's impact on server performance.You could play a little with the csf settings that control portscanning but caution be careful you don't ca...
by Linuxlover
05 Nov 2020, 10:01
Forum: General Discussion (csf)
Topic: (CSF) Check for IPs In RBLs ,not responding
Replies: 3
Views: 2258

Re: (CSF) Check for IPs In RBLs ,not responding

I would start by stop using an EOL (end of life) OS Centos 6 will only receive maintenance updates until November 30 2020 once that issue is sorted upgrade your csf version to the latest avalaible https://blog.configserver.com .
by Linuxlover
03 Nov 2020, 19:03
Forum: General Discussion (csf)
Topic: Issue with the alert emails being send by csf
Replies: 7
Views: 1201

Re: Issue with the alert emails being send by csf

Hello,

Ok i'll change that csf setting and in the meantime i'll go complain to Maxmind :-) thank you.
by Linuxlover
03 Nov 2020, 11:42
Forum: General Discussion (csf)
Topic: Issue with the alert emails being send by csf
Replies: 7
Views: 1201

Re: Issue with the alert emails being send by csf

problem is still there i forced a redownload of Maxmind databases by deleting the corrosponding files in /var/lib/csf/Geo but it didn't help it does download the databases but reports the wrong country sometimes not always.
by Linuxlover
30 Oct 2020, 20:58
Forum: General Discussion (csf)
Topic: Issue with the alert emails being send by csf
Replies: 7
Views: 1201

Re: Issue with the alert emails being send by csf

Hello, PS_LIMIT *Port Scan* detected from 194.87.138.228 (RU/Russia/-). 11 hits in the last 250 seconds.I use temp blocks CC_LOOKUPS = 1 CC_SRC = 1 The dates in /var/lib/csf/Geo are reasonable recent oldest is 18 Oktober 2020 regarding CC_SRC i did read your notice maxmind now requires an apikey i g...
by Linuxlover
30 Oct 2020, 11:57
Forum: General Discussion (csf)
Topic: Issue with the alert emails being send by csf
Replies: 7
Views: 1201

Issue with the alert emails being send by csf

Hello, I have a cPanel / whm server with csf installed on it.I have csf configuerd to automatically report abusive ip addresses to abuseipdb blacklist it works fine however when i receive the email csf sends the blocked ip address has the wrong country for example csf just sends to me that 194.87.13...
by Linuxlover
28 Oct 2020, 09:56
Forum: MailScanner Front-End
Topic: Remove Clam, never to return
Replies: 2
Views: 799

Re: Remove Clam, never to return

Hello, As far as i know the mailscanner installer will automatically install clamavconnector when it's missing so everytime a mailscanner update or a msfe update is released you'll run into the same problem.The only possible solution to this is asking the developers of those scripts to provide a set...
by Linuxlover
23 Oct 2020, 19:21
Forum: MailScanner Front-End
Topic: possible bug mtagroup doesn't exist on my server.
Replies: 1
Views: 657

possible bug mtagroup doesn't exist on my server.

Hello , In the mailscanner frontend on the mailscanner configuration page section "incoming work dir settings" The installer creates a group on your system called "mtagroup" and adds found users from mail, clamav, postfix, exim, etc to that group. This combined with Incoming Work...