Search found 9 matches

by Sarge
03 Mar 2022, 10:28
Forum: Suggestions (csf)
Topic: LFD write to own log instead of email (or in addition to)
Replies: 0
Views: 1420

LFD write to own log instead of email (or in addition to)

Hello, Emails as a basic notification system is not enough and even not-contemporary, definitely. Same messages sent to own log file at-least allow to write own parsing script to process the ones. It should not be so difficult to implement, I hope...just add two options to /etc/csf.conf SEND COPY of...
by Sarge
17 Feb 2022, 13:47
Forum: General Discussion (csf)
Topic: LFD blocks writing to log
Replies: 0
Views: 650

LFD blocks writing to log

Hello, Webmin Bandwidth monitor module reads from file /var/log/bandwidth records like Feb 17 07:00:30 condor3949 kernel: BANDWIDTH_IN:IN=br0 OUT= MAC=ff:ff:ff:ff:ff:ff:d4:5d:64:ab:80:8e:08:00 SRC=148.72.175.248 DST=148.73.156.235 LEN=49 TOS=0x00 PREC=0x00 TTL=128 ID=21965 PROTO=UDP SPT=50799 DPT=32...
by Sarge
08 Jan 2021, 15:37
Forum: General Discussion (csf)
Topic: SOLVED: It seems like CSF+LFD ignores Custom Log file
Replies: 2
Views: 2420

Re: SOLVED: It seems like CSF+LFD ignores Custom Log file

Dear Sergio, my great thanks !
Yes, I've missed the parenthesis ! Now everything works like a breeze :)
Best regards,
Serge
by Sarge
06 Jan 2021, 21:03
Forum: General Discussion (csf)
Topic: SOLVED: It seems like CSF+LFD ignores Custom Log file
Replies: 2
Views: 2420

SOLVED: It seems like CSF+LFD ignores Custom Log file

Hello ALL, I use CSF many years and have created many custom rules based on https://forum.configserver.com/viewtopic.php?t=7517 - but very first time I've met a problem what I can't understand - because everything looks correct - but does not work. 1) I have created a custom log file what is produci...
by Sarge
29 Jun 2014, 12:17
Forum: General Discussion (csf)
Topic: View lfd blocking statistics - from what log 12 months ?
Replies: 2
Views: 2826

Re: View lfd blocking statistics - from what log 12 months ?

Thank you !
This file stores data in a specific format, without IPs, right ? Like
1404022854,1,1404024284,3,1404022854,LF_PERMBLOCK_COUNT:1,1404024284,
LF_CUSTOMTRIGGER:3
So we can't see blocked IPs here.
by Sarge
29 Jun 2014, 08:35
Forum: General Discussion (csf)
Topic: View lfd blocking statistics - from what log 12 months ?
Replies: 2
Views: 2826

View lfd blocking statistics - from what log 12 months ?

Hello ! We all know CSF has interface button "View lfd blocking statistics" One of the parameters shows pie picture "Block triggers in the last 12 months" Just interested to understand - from what log file it takes the statistics for 12 (!) months ? Thanks in advance for answer !...
by Sarge
16 Jun 2014, 16:55
Forum: General Discussion (csf)
Topic: How to create a rule to allow access to port from certain IP
Replies: 5
Views: 4443

Re: How to create a rule to allow access to port from certai

I agree, but there is direct reference to a pattern in apache_log like if (($globlogs{CUSTOM1_LOG}{$lgfile}) and ($line =~ /^\S+\s+\d+\s+\S+ \S+ pure-ftpd: \(\?\@(\d+\.\d+\.\d+\.\d+)\) \[WARNING\] Authentication failed for user/)) { return ("Failed myftpmatch login from",$1,"myftpmatc...
by Sarge
16 Jun 2014, 13:19
Forum: General Discussion (csf)
Topic: How to create a rule to allow access to port from certain IP
Replies: 5
Views: 4443

Re: How to create a rule to allow access to port from certai

Sergio, thank you VERY MUCH for the answer ! Let me ask your opinion about a complex REGEX rule, although I'm not sure this is possible with CSF or LFD. Let's say we see in our apache_access_log too many accesses from an IP to the pages like "http://example.domain/search.php?query=two%C2%A0thre...
by Sarge
14 Jun 2014, 07:00
Forum: General Discussion (csf)
Topic: How to create a rule to allow access to port from certain IP
Replies: 5
Views: 4443

How to create a rule to allow access to port from certain IP

Hello to everyone ! Is it possible to use CSF to allow access to a port only from a certain IPs ? It seems to be a simple question - but I did not find an answer yet. Let's say I have SMTP on 110 port. I want to allow access only from external IP 68.192.172.14 and 85.5.39.156 (what means only these ...