Search found 197 matches

by marcele
13 Jan 2022, 09:04
Forum: General Discussion (csf)
Topic: Notifications sent to API, instead of mail
Replies: 6
Views: 3545

Re: Notifications sent to API, instead of mail

Just a note that CSF already supports this. Take a look at the BLOCK_REPORT option in /etc/csf/csf.conf. It's pretty easy to write a custom report script to log everything to an API.
by marcele
12 Jan 2022, 12:39
Forum: Report Bugs (csf)
Topic: Cluster members do not always respond
Replies: 2
Views: 5823

Cluster members do not always respond

For some reason its seems that cluster members do not always respond properly when denying an IP address. Cluster Ping (They all respond fine): csf --cping Sent request to 10.0.0.10, replied: [PONG!] Sent request to 10.0.0.20, replied: [PONG!] Sent request to 10.0.0.30, replied: [PONG!] Sent request...
by marcele
21 Oct 2021, 19:45
Forum: General Discussion (csf)
Topic: Geolocation (MaxMind) not working
Replies: 5
Views: 3022

Re: Geolocation (MaxMind) not working

I can confirm that we are also seeing the same issue on some of our servers using CSF v14.11. Using the fix corrects it. Before # csf -i 81.202.228.230 81.202.228.230 (81.202.228.230.dyn.user.ono.com) After the fix echo ',,,,,,' >> /var/lib/csf/Geo/GeoLite2-Country-Locations-en.csv csf -i 81.202.228...
by marcele
17 Apr 2021, 09:43
Forum: Report Bugs (csf)
Topic: LF_BIND trigger not working.
Replies: 0
Views: 6394

LF_BIND trigger not working.

In my testing I wasn't able to get the LF_BIND login failure trigger to work. After checking some Centos7 and Centos 8 servers it looks like the BIND trigger in RegexMain.pm doesn't account for the hex value e.g. (@0x7f18041004f0) that is logged in Bind 9+ servers. Broken (Currently used): https://r...
by marcele
14 Apr 2021, 10:28
Forum: Report Bugs (csf)
Topic: MESSENGERV3 will not work on Debian/Ubuntu
Replies: 2
Views: 5454

Re: MESSENGERV3 will not work on Debian/Ubuntu

One last thing that I also noticed was that there seems to be an extra slash in the lfd messenger v3 log with the defaults (Although it doesn't seem to cause any problems): The default messenger location: MESSENGERV3LOCATION = "/etc/httpd/conf.d/" When restarting LFD this is in the log (no...
by marcele
13 Apr 2021, 14:27
Forum: Report Bugs (csf)
Topic: MESSENGERV3 will not work on Debian/Ubuntu
Replies: 2
Views: 5454

MESSENGERV3 will not work on Debian/Ubuntu

In my testing I wasn't able to get the MESSENGERV3 to work correctly on Debian/Ubuntu servers (It can't find the SSL certificates). It looks like there is a bug in the Messenger.pm conftree function because it can't process the relative includes used by default on Debian/Ubuntu. The config used in /...
by marcele
09 Feb 2021, 12:30
Forum: Report Bugs (csf)
Topic: LF_APACHE_404 Trigger not working
Replies: 1
Views: 3985

LF_APACHE_404 Trigger not working

In my testing I wasn't able to get the LF_APACHE_404 login failure trigger to work. I'm not sure if this is just a Plesk server issue or if this bug applies to Cpanel servers too. From the stackoverflow post below it looks like in Apache 2.4.1 the 404 error code was demoted from the core:error to co...
by marcele
19 Oct 2020, 12:11
Forum: Report Bugs (csf)
Topic: Apache errors after enabling MESSENGERV3
Replies: 2
Views: 3993

Re: Apache errors after enabling MESSENGERV3

Sounds good. I had correct the perms along time ago but nice to see that there are settings for this now. Many thanks!
by marcele
02 Oct 2020, 18:13
Forum: Report Bugs (csf)
Topic: Apache errors after enabling MESSENGERV3
Replies: 2
Views: 3993

Apache errors after enabling MESSENGERV3

After enabling MESSENGERV3 on a Plesk server apache logs are full of these errors: [Tue Sep 29 10:13:24.787935 2020] [negotiation:error] [pid 861] (13)Permission denied: [client 208.91.111.234:57410] AH00686: cannot read directory for multi: /home/csf/public_html/ [Tue Sep 29 10:13:40.261728 2020] [...