ConfigServer Community Forum

Just to elaborate why this capability is needed: ---------------------- csf.rignore is only for process tracking. This means that googlebot can be blocked for other reasons and csf.rignore would not prevent this. For example, we have a cron driven shell script set up to look at the general Apache ac...

This was added some time ago with csf.rignore Chirpy, I read in the csf.rignore file that this mainly has to do with process tracking. If for example I insert: .googlebot.com Would this also prevent the GoogleBot IP from being inserted in the csf.deny list by other-than-process-tracking means? Than...

All accounts on server are getting this in the header: MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details Just started happening out-of-the-blue on one of our servers. Others are fine. We are running the following on all servers, with the latest version of the...

Anyone have any idea what may be going on with this?

I noticed clamd was dead after the recent update to v0.93. Then I tried this: ldconfig freshclam Here's what I got: getfile: Can't write 8192 bytes to /usr/local/share/clamav/clamav-1b9a1cdc8db5b52e7e73f910b4216b82 WARNING: Can't download main.cvd from database.clamav.net `contrib/init/RedHat/clamd'...

Anything?

I guess the basic question is this:

If an IP is in the GLOBAL_DENY list, then why am I still receiving notices that we are still being hit with fake log-ins, etc. by this same IP?

The challange is to block all scanalert.com scans as they are apparently used by hackers to probe our servers. Okay, so for the past two months we have collected all the scanalert IPs that we can and we have inserted these in an world accessible (via URL) list, and then inserted the URL in the GLOBA...