ConfigServer Community Forum

You're welcome.

yes, in CSF are the instructions for this:

# After making any changes to this file you must restart csf and then lfd
#
# If you want to redownload a blocklist you must first delete
# /var/lib/csf/csf.block.NAME and then restart csf and then lfd

Are you suffering phishing attacks with the email subject "I RECORDED YOU!" or "your account is hacked"? If you have ConfigServer MailScanner FE in your server then create an spamassassin file at: /etc/mail/spamassassin/ With the file name: blacksubjects.cf Write on that file the...

ok, for me is that this will be no logged and not reported to you, that is what you asked for on your first message:
"How can also block the logging of the above messages?"

My fault if I miss understood your request, sorry.

@ktp,
you wrote:

How can also block the logging of the above messages?

Well, that is exactly what you asked for:
# If a log line matches it will be ignored, otherwise it will be reported

You can do it simpler, just write \d+ instead of [74|80|81], using \d+ you will take care of any PHP version old or future.

Happy Birthday!

When this happens, and if cPhulk is enabled on your server, try to check if the IP is not blocked by cPhulk.
I had a similar issue and after checking everything I found that cPhulk was blocking the IPs not CSF.

Have you tried to add them to /etc/csf/csf.logignore

Sergio

No, as you can write your regex to take care of all PHP versions in just one line.

your email is telling that your PHP exceeded the time allowed to run
Exceeded : 1801 > 1800 (seconds)

So, with that rule you will let PHP to use the time needed.