Search found 228 matches

by sawbuck
28 Sep 2009, 17:24
Forum:
Topic: cxs v0.09
Replies: 3
Views: 19

3guys wrote:Still would like to see a button on the ui to view cxs.scan and csx.log files, similar to the modsecurity or lfd log buttons in CSF
3guys:
Have you looked at the "other files" interface in this version?

Jonathan:
Seeing duplicate entries in the drop down for /var/log/cxs.log
by sawbuck
24 Sep 2009, 23:51
Forum:
Topic: cxs v0.07
Replies: 2
Views: 14

Seem to be having a couple of issues with the save as defaults option. Having both exploit and virus scan ticked the output is such: logfile=/var/log/cxs.log mail=root exploitscan=1 virusscan=1 summary=1 Unticking virus scan and only having exploit gives this: logfile=/var/log/cxs.log mail=root expl...
by sawbuck
18 Sep 2009, 00:54
Forum:
Topic: New installation method
Replies: 7
Views: 49

As I did more trouble shooting it appears to be an issue between the uploader script and mod_sec.

Directive being used in exscgi.sh:

/usr/sbin/cxs --quiet --cgi --mail root --quarantine /home/safe/ --logfile /var/log/cxs.log $1

Did submit a ticket.

Thank you Jonathan.
by sawbuck
17 Sep 2009, 18:33
Forum:
Topic: New installation method
Replies: 7
Views: 49

I take it the 406 error is for a file that doesn't trigger cxs normally? Appears to be any file once SecRequestBodyAccess On is enabled. Seem to recall the developer suggesting users turn off mod_sec for domains triggering a 406. Improper coding on his part perhaps? Access denied with code 406 (pha...
by sawbuck
17 Sep 2009, 17:52
Forum:
Topic: New installation method
Replies: 7
Views: 49

That works except I'm getting a 406 with the mod_sec rule addition when using our current upload script - Uber Uploader (http://sourceforge.net/projects/uber-uploader/files/)

Can't say I'm much of a mod_sec expert. Something you might look at or suggest a different rule variation?
by sawbuck
16 Sep 2009, 19:19
Forum:
Topic: cxs Development
Replies: 5
Views: 46

Initial install was easy and straight forward. Especially like the detail of the notification emails. Nice work on the WHM interface also. Did several tests with the quarantine option and all worked as advertised. Assume the quarantine restore option in WHM is yet to be enabled? Any information on e...
by sawbuck
01 Jul 2009, 17:19
Forum: MailScanner
Topic: Updated, MS won't start.
Replies: 6
Views: 6357

Check this blog entry:
http://www.configserver.com/blog/index.php?itemid=419

The perl installer --force option still picked up ver 1.29 for us so had to use the wget/make/install which worked.
by sawbuck
05 Mar 2009, 15:03
Forum: MailScanner Front-End
Topic: Mailwatch reports. Is it possible to see the contents of the emails
Replies: 3
Views: 6353

In the Quarantine section at the bottom of that screen click on the Path link.