hello
i have activated the ipv6 support in csf configuration but still is blocking all trafic... when i go to csf deny ips my ipv6 is listed there and is not ticked.. so i can't understand why they are blocked... if i turn off csf ipv6 is working fine
is anyone having the same issue? i searched the forum but i couldn't find anyone else experiencing the same problem...

Hi, I am using CXS on a WHM server and the Daily and Weekly Scan Wizards lets me configure an email address to send the reports to.
Is there a way to send reports to multiple email addresses?

Hello,

Currently, I have configured the csf service so that if a person makes more than 10 attempts to connect to the pop service with a bad password it is temporarily blocked.
But after 5 temporary blocking it is permanently blocked, I would modify this value in order to increase it.
could you tell me how to do that?

Best regards

Hi all!, From my vps (Cpanel v78.0.18 on centos 6.9 and csf 12.09) I'm trying send smtp email on 465 port but using other server in other location (using phpmailer). By default, CSF blocks all outgoing connections (SMTP_BLOCK = ON). Due to I don't want disable SMTP_BLOCK I deleted the 465 port from SMTP_PORTS (ports monitoring) and save the changes and all worked fine.

The problems appear after...

Have you considered integrating DDoS Deflate from: ?

I recently had a situation with my linodes where I got locked out.

They support recommendation from them was to run iptables -F which cleared the problem.
I never found my IPs in csf.deny

My question is, are there 2 layers of firewall.
The rules contained within CSF and additionally on top of that other rules that could have been added by some other process?

Thanks for any insight.

Hello,

CSF does not load, I could not restart it.

There are numerous CSF lock files

=================================
xyzz# ls -lahtr /var/lib/csf/lock/
total 72K
drw------- 2 root root 4.0K May 1 2018 ./
-rw------- 1 root root 10 Mar 4 22:32 ST_ENABLE_report.lock
-rw------- 1 root root 7 Mar 4 23:13 command.lock
-rw------- 1 root root 10 Mar 12 23:23 LF_CSF.lock
-rw------- 1 root root 10...

I am continually getting emails warning of Suspicious Process running under user ....

Executable(s):
/opt/cpanel/ea-php72/root/usr/sbin/php-fpm (most common)
/opt/cpanel/ea-php72/root/usr/bin/php.cagefs

Command Line (s):
php-fpm: pool bitsmart_biz (most common)
php-fpm: pool nutraceuticals_net_au
/opt/cpanel/ea-php72/root/usr/bin/php -c /home/cafecoma/public_html/support/php.ini -q...

Hello, I have an idea and I'm wondering if it's practical. It would require CSF Firewall considering every access of a PHP page to be a login failure, even though there was no actual login.

My idea is simple. Almost all my sites are hand coded, so there does not exist (for example) a page named wp-login.php. I want to redirect all those requests for non-existent CMS or forum logins to a single...

hello
my csf and cxs has this error when i want to open from whm.
HTTP error 404
The requested page was not found.

We have a customer on our cpanel server with a poorly built app. we need to exclude their specific website from scanning.

We are running csf on a cpanel server, so is there a way to exclude their directly from scans?

Hi all,

We have recently had the CXS scanners installed on one of our dedicated server and thus far are happy, albeit, somewhat confused.
I have been reading everything I can find, some have (I think) a decent understanding of the mechanics and configuration of CXS but I am struggling to understand hows the scans actually happen, i.e. what are the differences between the watch scans and other...

cPanel's docs indicate that when Apache's SpamAssassin is running, the built in autoresponder will not work with a spam score of 5 or higher.

It doesn't seem like mailscanner has this type of integration with the autoresponder, which creates a ton of bounce back e-mail. Am I missing a setting?

And yes, my client wants autoresponders as they are important for business so can't just turn it...

Is there a way to discard emails with a specific Subject if they are sent to any email address on the server?

For example our server is being bombarded with spoofed emails with subject lines such as:

Your account was under attack! Change your access data!
Security Notice. Someone have access to your system.
Security Alert. Your accounts was compromised. You need change password!

It is possible...

I've been running WHM/Cpanel on Servers For at least 12 years along with CSF/LFD. Yesterday all of the sudden the server wouldn't accept WHM connection on port 2087. I immediately tried bringing it up on my mobile phone to see if for some reason by connecting from my hotel the system had auto blocked the IP. Nope, was blocking external access to the port, not IP specific. Had made no config...

We have a single account that for whatever reason was running mdbox formatting mailboxes. A recent cpanel webmail update did something to cause all emails (thousands) to no longer be viewable from webmail. I cannot see them in cmm either. I tried converting back to maildir format (successfully) but cmm is still showing them as mbox format and the users can still not see their emails. They are...

Dear Team,

We have a domain name on which we are using WHMCS and for sending of Emails we are using AWS-SES.
We are installed with CSF/LFD and that is not allowing sending of email.
When we disable CSF then we are able to send emails without any problem through our portal (WHMCS).

Is it possible to white-list our domain name XYZ from the CSF/LFD check or white-listing the ports to send emails...

Hi,

We are annoyed by what looks like abnormal process time exceeded repeated alerts on Apache workers. Details below.
It appeared after moving websites from php5.5 to php7.2. Adjusting PHP limits has no effect.
Temporary workaround : pignore all Apache user-ids.

Thanks for any hint.

---
ConfigServer Security & Firewall 12.09 gpl on Virtualmin / Ubuntu 14.04 / Linux 2.6.32-042stab127.2 #1 SMP...

I have CSF running on my debian machine and try to figure out which call is being blocked (either incoming or outgoing) that prevents a specific service to operate, but I fail to find the right log. When I tail /var/log/messages and invoke the webservice error I see no entry appearing. Could someone advise how to minitor every csf/iptables blocks in realtime?

I know it is csf, when I disable it,...

Just wanted to make two small suggestions for some of the cluster functionality:

1. When using cluster ignore or allow the entry added to the cluster members is missing the date and time at the end of the entry (like when the cluster deny is used). It would be nice if this was added.

2. The cluster ignore function allows you to add duplicate entries. It would be nice if it a check like the...