ConfigServer Community Forum

cc allow filter is not working on my server, version 14.01.

CC_ALLOW_FILTER = US,IR,IE,DE,ZA,CU,MX,GB,CA,HR

My control panel cannot update if cc allow filter is set to the above. If I delete the values then I can update my control panel.

Also, I tried whitelisting the ip addresses for the control panel update servers and I could not get thru.

I tried with maxmind and also ipverse

Hello,
i have similar issue.

i have two server and my configuration is

TCP_IN =
UDP_IN =

FASTSTART = 0
LF_IPSET = 1

CC_DENY =
CC_ALLOW =
CC_ALLOW_FILTER = IT
CC_ALLOW_PORTS = IT
CC_ALLOW_PORTS_TCP = 80,443,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096
CC_ALLOW_PORTS_UDP =

maxmind license is set

but the strange is from ssh i can't ping google.it or 8.8.8.8
i can't backup my...

Ubuntu 18.04.3 LTS
Cyberpanel 1.9
Error : CSF : Enabled but Stopped Unable to start the error output :
open3: exec of /usr/sbin/ipset flush failed: No such file or directory at /usr/sbin/csf line 5408.

While search found need to install IPSET & I have installed IPSTE.
________
root@cloud:~# sudo apt-get install ipset
Reading package lists... Done
Building dependency tree
Reading state...

Hi,

I noticed that after this latest update many requests return 520 error especially any page or file behind wp-includes
This issue only appeared after the latest update (14.01)!!
I didn't change anything on the server. The only thing changed is the CSF update.
Note: The entire website works well and there are no errors at all (Only any file or page behind wp-includes)

Regards,

Yesterday I saw that was an update available, so I clicked the button and updated, but today when I logged in, the buttons don't work. It's only on Mailscanner, not on any other element in WHM. Any thoughts? I can do anything else, just can't click on Mail Control or any of the buttons in MSFE. I just tested and found that this happens in Google Chrome, but not in Brave or Firefox. Guess I will...

After working av week trying to make CSF Messenger work in a usable manner, we must conlude that at current time it is not usable for us. Here is a list over problems and bugs we experienced:

Our system: We are running DirectAdmin and CSF 14.01. We have both CentOS 7 and CentOS 8 servers (the below list apply to both). We are using ipset:

- On DirectAdmin is it needed to change default path in...

During a recent update the web UI on my LFD has broken; it now just gives me ERR_CONNECTION_RESET . Nothing error-related is being logged in /var/log/lfd.log. What could the problem be?

Hello
Sometimes users put a lot of email addresses in the CC and CCI field of there mails (and misuse email as a basic list ...)
This sometimes overloads destination mail-servers resulting in banning or spam triggers.
Could it be possible to have an option that when there are more as x addresses in CC + CCI, the mails are put on queue and that exim only sends them one by one with a delay of for...

I have an account that can't receive mail from a vendor that uses Outlook 365.

I have been sent the NDR from the outgoing smtp server and the IT at the other end says I need to allow connection from the APAC region datacenter for O365.

I am trying to figure out how to change my filtering and protections to allow an entire region to be able to connect to my server without opening up to too many...

Hi,
How to filter IPs that connect to the Linux server

Hi,
How to filter IPs that connect to the Linux server
For this I have configured CC_Allow = CL, CL being the code of my country Chile.
However, this configuration does not work, because it continues to block IP SMTP, IP POP, IP CPANEL.

1) I wish I could block only access to cpanel from all countries.
2) And I will free the IPs of my...

Hello,

On one of our servers we received an email like:

Reported Modifications:

New account has been created with uid: gid: login: shell:

But nothing was changed for the root user.

grep '0:0' /etc/passwd
root:x:0:0:root:/root:/bin/bash

chage -l root
Last password change : , 2019
Password expires : never
Password inactive : never
Account expires : never
Minimum number of days between...

Where there are no log lines to report, is it possible to have CSF not notify me of such.
Every morning I check my CSF logs.
It would be good if I didn't have to open an email log entry to find that there is nothing in there.

Basically, I only want to be notified when there is something that I need to see.

Not getting a response when trying to ping downloads.configserver or download. to update to a newer version than 13.07. Is possible my server IP is blocked for any reason?

Thanks

HI

We just moved a handful of VMs from OpenVZ v6 to a Virtuozzo 7 server.

all cPanel/.DA servers with CSF have issues.
When trying to enable CSF we get this:

csf: FASTSTART loading Packet Filter (IPv4)
Error: FASTSTART: (Packet Filter IPv4) [] . Try restarting csf with FASTSTART disabled, at line 5538

I then run: /etc/csf/csftest.pl

root@server2 # /etc/csf/csftest.pl
Testing...

I enjoy the configserver explorer in WHM and am hoping to see it in NodeWorx (whm for Interworx). Any plans? I know the csf is available which is great, but not having this one is holding me back from switching over.

Hi there, Folks

I'm new here so please treat me gently! :D

I have just recently had CXS installed on one of my cPanel servers - the idea being to test it and then if it works well, to purchase it for the other servers in our rack. However, the first problem I have come across is the inability of the transfer tool to work in cPanel. I have tried to copy an account from another of our cPanel...

Is it normal with active both:

CC_ALLOW_FILTER = UK, US

AND regex.custom.pm:

if (($globlogs{CUSTOM3_LOG}{$lgfile}) and ($line =~ /^.*\ .*(wp-login|xmlrpc).*/)) {
return ( WP whacker ,$1, WP_whacker , 1 , , 172800 );

to continue to receive alerts from non UK, US actors?

ps CC_ALLOW_FILTER = UK, US is active and working as ipset list shows both countries block lists active.

attempting update v13.08 to v13.10

With ipset in use and using the following update script, script freezes with message:

*ERROR* IPSET:

Don't know what to do. . .

Hi fan of the product and thanks for offering it for free !

I had just a question/suggestion is it posible to list the ports seperate from the config.

Its just a bit awkward to have to go into the whole config to open ports and the overvieuw is lost since there is no order.
Its not a biggie just wondering if it can be formated differently

thanks !

Two accounts need to regularly login to my server via SSH and sync, so I end up getting a ton of emails all day long.

Can we add an option to ignore certain users when they login via SSH? (i.e., no email alert)

As it stands now, I'm going to have to disable LF_SSH_EMAIL_ALERT entirely, which will weaken security to my other accounts.