ConfigServer Community Forum

Blocking IP with "csf -d" not resolve too...

I have CSF installed on all server and since last month I am receiving attacks with 15~30Mbps traffic and with CSF enabled the server crash, I need to access with KVM and disable the CSF than the server back to respond. I am already enable SYN flood protection but not resolved. Changed the size of t...

Resolved, the problem is the content of the csf.deny I used the : to separate but the correct is |

I removed and reinstalleed and now show this error: *ERROR* line:[789] Command:[/sbin/iptables -v -I INPUT ! -i lo -p tcp --dport -m limit --limit 30/m --limit-burst 5 -j ACCEPT] Error:[iptables v1.4.7: invalid port/service `-m' specified] You should check through the main output carefully The probl...

MESSENGER_TEXT = "8889"
MESSENGER_HTML = "8888"
MESSENGER_RATE = "30/m"
MESSENGER_BURST = "5"

MESSENGER_HTML_IN = "80,2082,2095"
MESSENGER_TEXT_IN = "21"

The correct format is:

tcp:in:d=21:d=0.0.0.0/0

or

tcp|in|d=21|d=0.0.0.0/0

: or | ?

I am clear the csf.deny and resolved, but this file not have bad rules... I ever used this rules and this problem start now. The content of csf.deny is: tcp:in:d=21:d=0.0.0.0/0 # do not delete tcp:in:d=2082:d=0.0.0.0/0 # do not delete tcp:in:d=2083:d=0.0.0.0/0 # do not delete tcp:in:d=2086:d=0.0.0.0...

Have this: Flushing chain `INPUT' Flushing chain `FORWARD' Flushing chain `OUTPUT' Flushing chain `PREROUTING' Flushing chain `POSTROUTING' Flushing chain `OUTPUT' DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:67 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:67 DROP tcp opt -...

After start using the FASTSTART to use the CC_DENY and csf broken. On the first install and configuration work normal, but on next day the csf crash and I need to disable the FASTSTART to work... See the error: csf: FASTSTART loading DROP no logging (IPv4) LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0....