Search found 56 matches

by sneader
14 Jul 2014, 16:44
Forum: Suggestions (cmc)
Topic: Show Whitelisted Users
Replies: 3
Views: 10495

Re: Show Whitelisted Users

FYI, I just got burned by this. Noticed high load on one server, and after doing troubleshooting, found a site getting beat up by 3 different IPs, all trying to brute force a WordPress site. Turns out we had Mod Sec whitelisted (disabled) for this particular user. Sure would like to see this feature...
by sneader
14 Feb 2014, 22:06
Forum: General Discussion (cxs)
Topic: WHM Account Restore High Load issue with cxs
Replies: 1
Views: 3382

WHM Account Restore High Load issue with cxs

I have a customer with a 6GB cpanel account that I have had to restore a few times recently. Both times, the server nearly crashed, as the load approached 120! On the 3rd restore, I finally figured out what the problem... it was cxs scanning all the files being restored! To solve the problem I did t...
by sneader
21 Jan 2014, 18:03
Forum: General Discussion (cxs)
Topic: Changing CXS Options seem to have no effect
Replies: 5
Views: 6764

Re: Changing CXS Options seem to have no effect

You are awesome, thanks!! It would have taken me a long time to sort this out!!

- Scott
by sneader
21 Jan 2014, 17:59
Forum: General Discussion (cxs)
Topic: Changing CXS Options seem to have no effect
Replies: 5
Views: 6764

Re: Changing CXS Options seem to have no effect

Looking in /var/log/cxswatch.log, I can see where I restarted cxs watch, and I can see it's using the correct options (W instead of w, and x removed): Jan 21 09:31:09 hostname cxswatch[695673]: TERM Jan 21 09:31:09 hostname cxswatch[695673]: daemon stopped Jan 21 09:31:09 hostname cxswatch[425017]: ...
by sneader
21 Jan 2014, 17:50
Forum: General Discussion (cxs)
Topic: Changing CXS Options seem to have no effect
Replies: 5
Views: 6764

Re: Changing CXS Options seem to have no effect

I admit I am not familiar with the ModSecurity cxs hook, so I need to do some reading. My /etc/cxs/cxscgi.sh reads:

/usr/sbin/cxs --quiet --cgi --smtp -Q /home/quarantine --qoptions Mv --mail root "$1"
by sneader
21 Jan 2014, 17:32
Forum: General Discussion (cxs)
Topic: Changing CXS Options seem to have no effect
Replies: 5
Views: 6764

Changing CXS Options seem to have no effect

I am using cxs v 4.14. I am editing the cxs Watch configuration via the WHM plug-in, under "Configure cxs Watch" In that file, it shows my options as: --options mMOLfSGchednWDZR After saving, I am clicking "Restart cxs Watch". When I receive a cxs Scan alert email, it shows in th...
by sneader
09 Jan 2014, 16:05
Forum: Suggestions (cmc)
Topic: Show Whitelisted Users
Replies: 3
Views: 10495

Show Whitelisted Users

Occasionally we use "Modify User Whitelist" to disable Mod Security for a customer, as part of some troubleshooting. Sometimes we forget to turn it back on. :-( I would like to see something obvious on the main CMC page, that makes it clear that there are users that are currently whitelist...
by sneader
15 Apr 2013, 16:03
Forum: General Discussion (csf)
Topic: lfd Excessive resource usage squirrelmail
Replies: 4
Views: 11527

Re: lfd Excessive resource usage squirrelmail

Thanks Jonathan!! That is the push that I needed... very bad with regex, but I can take this example and use it in many ways. I appreciate your help and all your products and services!

- Scott
by sneader
15 Apr 2013, 15:37
Forum: General Discussion (csf)
Topic: lfd Excessive resource usage squirrelmail
Replies: 4
Views: 11527

Re: lfd Excessive resource usage squirrelmail

Hmmm... do I really want to start ignoring EVERYTHING related to /usr/local/cpanel/3rdparty/php/53/bin/php-cgi ??

That seems a bit dangerous, when all I want to do is whitelist squirrelmail?
by sneader
11 Apr 2013, 03:52
Forum: General Discussion (csf)
Topic: lfd Excessive resource usage squirrelmail
Replies: 4
Views: 11527

lfd Excessive resource usage squirrelmail

After upgrading to WHM 11.36, I'm getting email alerts regarding excessive resource usage with Squirrelmail, for example: Resource: Virtual Memory Size Exceeded: 231 > 200 (MB) Executable: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi Command Line: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi /usr/...