Search found 5 matches

by csurgi
05 Apr 2024, 13:14
Forum: Suggestions (cxs)
Topic: Ability to avoid of using file magic bytes
Replies: 0
Views: 439

Ability to avoid of using file magic bytes

Hello, It would be great if I can avoid using file magic, because these days are many injected php script starts with PK for example, and CXS ignores it, based on the file magic. And they are spamming for example. Is there any way to scan (and disable) any files which's md5sum is in the cxs.xtra? No...
by csurgi
14 Dec 2021, 18:57
Forum: General Discussion (cxs)
Topic: CXS Upgrade to v6.38 from v6.35 Failure
Replies: 2
Views: 3851

Re: CXS Upgrade to v6.38 from v6.35 Failure

Code: Select all

yum update ca-certificates
solved the same problem when I tried to update from 13.03 to 13.06
by csurgi
25 Aug 2016, 17:12
Forum: Report Bugs (csf)
Topic: timeout value not sent to csf cluster members on tempbans
Replies: 1
Views: 3502

timeout value not sent to csf cluster members on tempbans

Hi, LFD sends fixed 0 as timeout to the cluster members: /usr/sbin/lfd line 7496: if ($config{CLUSTER_BLOCK} and $config{CLUSTER_SENDTO} and !$cluster) {&lfdclient($perm,"",$ip,"$port","$inout","0")} It shoud be: if ($config{CLUSTER_BLOCK} and $config{CLUS...
by csurgi
18 Jun 2015, 16:17
Forum: Suggestions (csf)
Topic: allow to use ipset for temporary blocks
Replies: 2
Views: 4881

allow to use ipset for temporary blocks

Hi,

Now I have a server under my hand with csf with DENY_TEMP_IP_LIMIT=250.
250 entry is enough for about 4 minute denys, and there are rotated out.
But it's should deny IPs for 120/60/30/5 minutes...
Is there a way to support ipset for longer denies?

Regards
by csurgi
16 Jul 2014, 14:02
Forum: General Discussion (csf)
Topic: SMTPAUTH_RESTRICT
Replies: 13
Views: 12831

Re: SMTPAUTH_RESTRICT

Hi, I have a related issue about IPv6 and SMTPAUTH_RESTRICT When I try to add IPv6 addresses to /etc/csf/csf.smtpauth and reloading csf (csf -r) its regenerates the /etc/exim.smtpauth file but, it has a problem. Exim's iplsearch function is working well with IPv4 addresses, but it's needs IPv6 addre...