Hey guys,

It seems my server is getting a lot of failed SASL auth attempts via the maillog lately. This doesn't seem to be part of CSF's default configuration, so a lot of bad attempts got through!

I added a custom rule for LFD to ban these bad SASL people, but I highly suggest you make it part of the default csf.conf

Here is the tutorial I followed to implement the custom rules on my own...

Hello,

I am newbie.

One of my client claims that the access from his PC has been blocked many times by csf recently.

He restarts the rooter, then the new ip address allocated by DHCP changes(He uses dynamic ip address) and he can access to the site for a while, however, his new access ip is blocked soon again and again.

I also received the alert of csf many times when his access ip address...

I don't know how long this has been going on, I only recently discovered it in my error logs. Many years ago, though, I used to write Perl scripts and import the output from a PHP file using LWP::Simple. Like so:

#!/usr/bin/perl

use LWP::Simple;

$getHeader = get('

print Content-type: text/html\n\n ;
print $getHeader;
exit;

I recently saw a ton of these errors in my log, though:...

Hi,

Is Fedora Server 31 already supported? Is it safe to go with distro upgrade?

I am using csf -td to block certain IP addresses. This adds them to the LOGDROPIN chain. However, in the INPUT chain, LOGDROPIN comes AFTER the ACCEPT rules for specific ports, this effectively allows IP addresses that should be denied to still hit the computer via open ports. For example, even a blocked computer can connect to ports 80 and 443 here because they come before the LOGDROPIN chain....

hello,
there is any way to exclude single email address account (email@domain.com) to LF_DISTSMTP check ? i have email account use from different server ( about 30 different ip ) but i don't want to add this ip to ignore list.
thanks

hi
I want to close the whole country code but open all Owner CIDR google and yahoo and msn,bing on csf

please guide me

In Mailscanner Front End > Mail Control, if I run a search it only shows messages from the last month. Is there a way to extend this so it shows older messages?

Hello folks,
I notice when i'm scanning my hosting server with nmap inside of msfconsole , it put the ip of attacker in whitelist even if this ip is in blacklist.
please how to solve that???
thank you

Hi,

Not sure if this is in the right forum or not, sorry!

Basically when I am checking the server security with CSF it states 'Check nameservers Unable to resolve nameserver ' under the 'WHM Settings Check' section. This only appears on running the 'Run again and display all checks' report but under the 'Run again' report it doesn't appear. The nameserver ns1.yourdomain.com (I'm using...

Hi,

Searched the forum but could not find any answer to the following question:

Would an allow ip superseed a country block?

Scenario: We have actively blocked DE (Germany) through a country block, but want to allow one static ip from Germany to be allowed using Firewall Allow IP .

Would this work?

Hope to hear from you soon.

With best regards,

Piet Nutbey

The cXs Installer does not check for ClamAV before continuing. I think that the installer should check for ClamAV installation first, before continuing and then exit if it is not present with a warning to the user that it can't install until ClamAV has been installed first.

Hi folks!

A bit of a general question, I was wondering if when an IP is blocked in CSF (or by LFD), does it block incoming DNS queries by default or do I need to allow them to make queries?

I can't find this documented anywhere.

Kind regards,
Jess

Hello, CSF is blocking ftp upload to my OVH remote backup destination. Backup transfer is set as ftp on port 21.
Destination is validated and working when csf is disabled. Any clue how can I fix this?
Thanks!

Hello.

After looking at some fresh csf.conf file I detected I was missing some stuff in my own csf.conf files.
Some were logical because they were only for cPanel.

Somewhere on the forums in a very old topic, I read that queue alert/interface was also only for cPanel because this worked with exim.

However, Directadmin is also using Exim mailserver.
Next to that I think script alert could also...

Hello,

Can I Block POST request if it contains a specific word or some words?

Regards,

Please do not bump threads

Brief explanation:

We use CSF+LFD on all of our Linux based servers of which are endpoints, in that they are not required to do any IP forwarding/routing. (We'd use Shorewall for that.) This includes our internal office servers.

We also use two Unbound instances as our office DNS resolver, particularly as we have various internal only DNS mappings we need to establish.

I have however noticed...

I'm using a third party mail server to send emails for the domains hosted on the VPS. They provide MX, TXT, CNAME records (without any IP address) to add in the DNS zone file for each domain, which I did successfully and emails are being sent by the PHP script using SMTP authentication.

Thus, I have disabled all email related services (Postfix, Dovecot, etc.). As a result, I'm not getting system...

I had hundreds of http connections from the abusive IP and added IP to csf.deny. Apache status page however continued showing connections from this IP. I restarted services and killed processes without any luck. I had to add IP to CloudFlare firewall to stop the connections. Is there a certain attack rate that makes CSF and software firewall useless for this case?

I keep getting this error page when I try to Enable | Start the cxs Watch ...
Software error:

open3: exec of /usr/sbin/service cxswatch start failed: No such file or directory at /etc/cxs/ConfigServer/cxsServices.pm line 351.

For help, please send mail to this site's webmaster, giving this error message and the time and date of the error.

looks like something to do with the perl module...