Hi! Not sure if this should have been filed under the Bugs thread or not but I found some typo's in /etc/csf/readme.txt and /etc/csf/csf.conf that I felt you should be aware of.

In /etc/csf/readme.txt, on line 775, I see the following text:

Translation of /home/csf/en.php is possibl by creating the appropriate

I believe the word possibl should actually be possible.

In...

I'm trying to use the following CONNLIMIT value:

CONNLIMIT = 465;4,587;4,25;15
CONNLIMIT_LOGGING = 1

The idea is to stop some bots that are opening lots of SMTP connections at the same time.

To test this after restarting csf, i created the following bash script:

#!/bin/bash

for i in `seq 1 50` ; do
echo QUIT | nc 192.168.1.40 465 &
done

I tried to run it multiple times but I...

Hi, I encounter the following problem:

Status of csf:You have an unresolved error when starting csf:
Error: iptables command failed, at line 1013 in /usr/sbin/csf

Does anybody knows what the reason might be?

OS: Cloudlinux 6.8, iptables v1.4.7, csf v10.14

I would like to only get emails for permanent blocks from LFD.
The temp ones are just too often with our network.

Here is the temp ones for example:

Time: Mon Jul 24 01:15:04 2017 -0400
IP: 78.43.119.88 (DE/Germany/HSI-KBW-078-043-119-088.hsi4.kabel-badenwuerttemberg.de)
Failures: 1 (htpasswd)
Interval: 3600 seconds
Blocked: Temporary Block

If I can't just stop the temp block...

lfd/csf block Google PageSpeed Insights website speed test

For a few days, it's not possible for me to open the Apache logs of my server.

I get the following error when I try to check the logs:
Failed to receive status information from Apache.
And:
Unable to retrieve Apache Server Status - Unable to download: Forbidden

I found out that the problems are causes by CSF. Because when I disable CSF the Apache logs work again.
I tried to reset all...

this morning I had a weird situation as I discovered mailscanner was stopped (was so since yesterday afternoon, no reason found but in any case config file empty, no rules anymore, just a dead duck). Forced a re install, then forced rules etc to get it back up and running.

Luckily server retained all the mails in queue all that time so nothing was lost. Though all root mails were also queued,...

I was wondering if there is a way to create a warning page that blocked ip people can submit or redirect blocked ip people to another page?

What I wanted to do is make it so it doesn't just so that they can't connect to any of the sites on the server. I want it so I can put a Warn you have been blocked via blah blah blah please contact server admin then I will put a contact form on it.

This...

I contacted you because I have a problem in the csf with the bandwidth of the server, I have contracted 20 MB and with the active csf, I do not exceed 3 MB, I disable the csf and I get 20 MB. The default settings are no spam, no attacks. This step since the last update 10.14

How can i solve this?

I appreciate your help

Hello,
I installed CSF on main server and configure it.
but when csf enabled then all of my vpses cannot connect to internet.
whne i disable csf everything is ok.
i use virtualizor.
my DC is Hetzner.
CSF v10.14

everyine can help?

How to exclude in csf ignore file such process:

Account: maximus
Resource: Process Time
Exceeded: 1971104 > 1800 (seconds)
Executable: /usr/local/cpanel/bin/jailshell
Command Line: jailshell (maximus) hell -c /home/maximus/maximuscron.sh

is there any way for mail control to export reports
it would be very useful if there was someway to export reports about malware & spam. Particularly offending IPs & email addresses associated with them. That can be more easily submitted to blocklists

I suppose what I am looking for is something like use the bulk option. Select the entries I want & export to excel or access or...

We want to have our own custom blocklist file at and include it in csf.blocklists on all our servers.
Is the following an acceptable format for csf.blocklists?

tcp|in|d=80|s=46.229.160.0/20 # flooding ADVANCEDHOSTERS-AS NETHERLANDS - do not delete - Sat Apr 22 03:54:23 2017
tcp|in|d=80|s=51.254.0.0/15 # flooding OVH SAS FRANCE - do not delete - Sat Apr 22 03:54:23 2017...

Can I include command separated port numbers in the csf.deny file?

For example I have the following:

tcp|in|d=80|s=89.248.160.0/21 scannerbots googlemapsexploit QUASINETWORKS SEYCHELLES - do not delete - Tue Apr 11 14:49:02 2017

And I want to block port 443 too

tcp|in|d=80,443|s=89.248.160.0/21 scannerbots googlemapsexploit QUASINETWORKS SEYCHELLES - do not delete - Tue Apr 11...

I was succesfully using CC_ALLOW but now, when I delete the country codes to remove restriction, CSF blocks everyone except the IPs in the firewall allow list.
Is there any other settings I should turn off to disable CC_ALLOW?

Hello

I have a very weird problem on a server which has CSF/LFD installed. For long CSF/LFD just worked very fine. But today, while watching some logs, I noticed that countries which are in CC_DENY were not blocked anymore.
Trying to understand this problem, I 1st blamed GeoIP. but no, GeoIP data is updated and my geoiplookup <ip> responses are correct.
Then, to my surprise, I think I...

Hi

I backup to the S3 bucket.

It seems that with the Firewall on, I cannot validate my S3 connection credentials. Turn it off and it validates OK.

I want to have it validate whilst the CSF is on, as I am having issues with random few accounts not backing up due to a transport error. - thinking I might need to allow AWS through the CSF somewhow.

Any help be appreciated.

Thanks...

Good Evening,

I've spent the last few hours testing several Custom RegExs that I wrote into regex.custom.pm. They work beautifully and issue temp blocks for offending IP addresses. I also have Temporary to Permanent IP blocking enabled in csf.conf, and expected these temp blocks to convert to perm after three occurrences. This doesn't happen and the temps from the custom RegExs never...

I'm seeing this error when doing a MailScanner lint test. (mailscanner nor SA)
Is it important and if so, how do I fix it.

ERROR: The envelope_sender_header in your spamassassin.conf
ERROR: is not correct, it should match X-cPanel-MailScanner-From

Using csf v10.13

Have a list of around 100k ip addresses I want to block.

Adjusted LF_IPSET_MAXELEM and DENY_IP_LIMIT to 100k.

After adding list to csf.deny I can no longer add individual ips using quick deny and get the message:

Hash is full, cannot add more elements.

What value do I need to set LF_IPSET_HASHSIZE to for a list this size?

Is there a calculation or online...