Search found 33 matches

by iodisciple
09 Mar 2018, 15:42
Forum: General Discussion (csf)
Topic: Can't ping IPv4
Replies: 4
Views: 1223

Re: Can't ping IPv4

Thank you for your reply. I wasn't clear. I can ping with IPv4 to www.google.com etc. but not to a server with CSF / LFD installed. root@backup01:~# cat /etc/debian_version 9.3 root@backup01:~# grep "ICMP_.* =" /etc/csf/csf.conf ICMP_IN = "1" ICMP_IN_RATE = "1/s" ICMP_OUT = "1" ICMP_OUT_RATE = "0" I...
by iodisciple
09 Mar 2018, 15:10
Forum: General Discussion (csf)
Topic: Can't ping IPv4
Replies: 4
Views: 1223

Can't ping IPv4

Hi all, I've discovered a strange problem with all my Debian 9.3 servers with CSF/LFD latest version. I cannot ping via IPv4. It does ping via IPv6 though. Settings are as below. I also still can't ping when both servers are in the csf.allow and csf.deny files. ICMP_IN = "1" ICMP_IN_RATE = "1/s" (al...
by iodisciple
09 Mar 2018, 08:36
Forum: General Discussion (csf)
Topic: csf.allow & csf.ignore
Replies: 2
Views: 822

Re: csf.allow & csf.ignore

IGNORE_ALLOW should be kept at 0.

So the IP is in both files and you did a:
# csf -r
# systemctl restart lfd

And you still get alerted? Do the servers maybe connect to each other with IPv6 instead of IPv4?
by iodisciple
08 Mar 2018, 08:40
Forum: General Discussion (csf)
Topic: Which Port need to be open?
Replies: 1
Views: 639

Re: Which Port need to be open?

1. Outgoing yes
2. https://www.configserver.com/cp/csf.html at the bottom is documentation
3. Yes if you are ready to use it
4. Login failure deamon
5. No (how do you manage your server?)
by iodisciple
06 Mar 2018, 10:20
Forum: General Discussion (csf)
Topic: MaxMind Geolite databases will soon be deprecated,
Replies: 8
Views: 2381

Re: MaxMind Geolite databases will soon be deprecated,

Edit the /etc/csf/csf.conf and set the CC_OLDGEOLITE to 0. Restart csf.
by iodisciple
28 Feb 2018, 19:26
Forum: General Discussion (csf)
Topic: cannot seem to block an IP number
Replies: 3
Views: 1022

Re: cannot seem to block an IP number

firewalld runs independent of csf/lfd, you shouldn't need it.
by iodisciple
28 Feb 2018, 16:36
Forum: General Discussion (csf)
Topic: cannot seem to block an IP number
Replies: 3
Views: 1022

Re: cannot seem to block an IP number

Is it a standard installation or DirectAdmin etc.? What is in the /etc/csf/csf.deny file?
by iodisciple
28 Feb 2018, 12:13
Forum: General Discussion (csf)
Topic: IP in csf.allow with temporary block
Replies: 2
Views: 755

Re: IP in csf.allow with temporary block

I believe it's not blocked because of csf (IP match in csf.allow, block may not work) but because of incorrect authentication data (password, protocol, certificate, cipher suite, etc.) Check your auth logs.
by iodisciple
16 Feb 2018, 09:58
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 54
Views: 62454

Re: Custom REGEX rules for CSF.

Block brute force failed SASL attempts. Debian 9, dovecot / postfix server. Error: Feb 16 08:13:32 mail02 postfix/submission/smtpd[4312]: warning: unknown[85.219.80.99]: SASL PLAIN authentication failed: Edit in /etc/csf/csf.conf: CUSTOM1_LOG = "/var/log/mail.log" Regular expression in /usr/local/cs...