Search found 56 matches
- 14 Jul 2014, 16:44
- Forum: Suggestions (cmc)
- Topic: Show Whitelisted Users
- Replies: 3
- Views: 10495
Re: Show Whitelisted Users
FYI, I just got burned by this. Noticed high load on one server, and after doing troubleshooting, found a site getting beat up by 3 different IPs, all trying to brute force a WordPress site. Turns out we had Mod Sec whitelisted (disabled) for this particular user. Sure would like to see this feature...
- 14 Feb 2014, 22:06
- Forum: General Discussion (cxs)
- Topic: WHM Account Restore High Load issue with cxs
- Replies: 1
- Views: 3382
WHM Account Restore High Load issue with cxs
I have a customer with a 6GB cpanel account that I have had to restore a few times recently. Both times, the server nearly crashed, as the load approached 120! On the 3rd restore, I finally figured out what the problem... it was cxs scanning all the files being restored! To solve the problem I did t...
- 21 Jan 2014, 18:03
- Forum: General Discussion (cxs)
- Topic: Changing CXS Options seem to have no effect
- Replies: 5
- Views: 6764
Re: Changing CXS Options seem to have no effect
You are awesome, thanks!! It would have taken me a long time to sort this out!!
- Scott
- Scott
- 21 Jan 2014, 17:59
- Forum: General Discussion (cxs)
- Topic: Changing CXS Options seem to have no effect
- Replies: 5
- Views: 6764
Re: Changing CXS Options seem to have no effect
Looking in /var/log/cxswatch.log, I can see where I restarted cxs watch, and I can see it's using the correct options (W instead of w, and x removed): Jan 21 09:31:09 hostname cxswatch[695673]: TERM Jan 21 09:31:09 hostname cxswatch[695673]: daemon stopped Jan 21 09:31:09 hostname cxswatch[425017]: ...
- 21 Jan 2014, 17:50
- Forum: General Discussion (cxs)
- Topic: Changing CXS Options seem to have no effect
- Replies: 5
- Views: 6764
Re: Changing CXS Options seem to have no effect
I admit I am not familiar with the ModSecurity cxs hook, so I need to do some reading. My /etc/cxs/cxscgi.sh reads:
/usr/sbin/cxs --quiet --cgi --smtp -Q /home/quarantine --qoptions Mv --mail root "$1"
/usr/sbin/cxs --quiet --cgi --smtp -Q /home/quarantine --qoptions Mv --mail root "$1"
- 21 Jan 2014, 17:32
- Forum: General Discussion (cxs)
- Topic: Changing CXS Options seem to have no effect
- Replies: 5
- Views: 6764
Changing CXS Options seem to have no effect
I am using cxs v 4.14. I am editing the cxs Watch configuration via the WHM plug-in, under "Configure cxs Watch" In that file, it shows my options as: --options mMOLfSGchednWDZR After saving, I am clicking "Restart cxs Watch". When I receive a cxs Scan alert email, it shows in th...
- 09 Jan 2014, 16:05
- Forum: Suggestions (cmc)
- Topic: Show Whitelisted Users
- Replies: 3
- Views: 10495
Show Whitelisted Users
Occasionally we use "Modify User Whitelist" to disable Mod Security for a customer, as part of some troubleshooting. Sometimes we forget to turn it back on. :-( I would like to see something obvious on the main CMC page, that makes it clear that there are users that are currently whitelist...
- 15 Apr 2013, 16:03
- Forum: General Discussion (csf)
- Topic: lfd Excessive resource usage squirrelmail
- Replies: 4
- Views: 11527
Re: lfd Excessive resource usage squirrelmail
Thanks Jonathan!! That is the push that I needed... very bad with regex, but I can take this example and use it in many ways. I appreciate your help and all your products and services!
- Scott
- Scott
- 15 Apr 2013, 15:37
- Forum: General Discussion (csf)
- Topic: lfd Excessive resource usage squirrelmail
- Replies: 4
- Views: 11527
Re: lfd Excessive resource usage squirrelmail
Hmmm... do I really want to start ignoring EVERYTHING related to /usr/local/cpanel/3rdparty/php/53/bin/php-cgi ??
That seems a bit dangerous, when all I want to do is whitelist squirrelmail?
That seems a bit dangerous, when all I want to do is whitelist squirrelmail?
- 11 Apr 2013, 03:52
- Forum: General Discussion (csf)
- Topic: lfd Excessive resource usage squirrelmail
- Replies: 4
- Views: 11527
lfd Excessive resource usage squirrelmail
After upgrading to WHM 11.36, I'm getting email alerts regarding excessive resource usage with Squirrelmail, for example: Resource: Virtual Memory Size Exceeded: 231 > 200 (MB) Executable: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi Command Line: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi /usr/...