Search found 1042 matches
- 12 Aug 2023, 04:07
- Forum: General Discussion (csf)
- Topic: How to exclude some IPs from SSH email alerts
- Replies: 3
- Views: 1152
Re: How to exclude some IPs from SSH email alerts
I had the same issue and what I did in cPanel was to create an email filter to delete those emails and for me that was the only way to get rid of them.
- 11 Aug 2023, 21:31
- Forum: MailScanner
- Topic: avoiding spoofing
- Replies: 1
- Views: 2648
Re: avoiding spoofing
The best way to go is to create your own SPAMASSASSIN RULE and tell your cPanel customers not to add their own domains in MailScanner WhiteList. I mean, if the hacker is impersonating you and you have your own domain in your MailScanner White List, then the spoofed email will go thru. So, if you cus...
- 11 Aug 2023, 21:26
- Forum: General Discussion (csf)
- Topic: How to ignore wp-toolkit process?
- Replies: 13
- Views: 2634
Re: How to ignore wp-toolkit process?
ok, this will help you:
in csf.pignore add:
in csf.pignore add:
exe:/opt/cpanel/ea-php74/root/usr/bin/php
- 04 Aug 2023, 18:33
- Forum: General Discussion (csf)
- Topic: How to ignore wp-toolkit process?
- Replies: 13
- Views: 2634
Re: How to ignore wp-toolkit process?
Try this:
Code: Select all
exe:/usr/local/cpanel/3rdparty/wp\-toolkit/plib/vendor/wp\-cli/wpt\-wp\-cli\.php
- 03 Aug 2023, 17:41
- Forum: General Discussion (csf)
- Topic: REGEX with look ahead not working
- Replies: 1
- Views: 794
Re: REGEX with look ahead not working
Try the following REGEX instead:
Code: Select all
^.*Failed to fetch cPStore
- 02 Aug 2023, 06:06
- Forum: General Discussion (csf)
- Topic: How to ignore wp-toolkit process?
- Replies: 13
- Views: 2634
Re: How to ignore wp-toolkit process?
Just curious,
Why did you wrote those " * " on the following line?
Why did you wrote those " * " on the following line?
pcmd:*/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli\.php*
- 02 Aug 2023, 05:56
- Forum: General Discussion (csf)
- Topic: How to exclude some IPs from SSH email alerts
- Replies: 3
- Views: 1152
Re: How to exclude some IPs from SSH email alerts
Have you tried to add those IPs at CSF.IGNORE?
- 23 Jul 2023, 15:42
- Forum: General Discussion (csf)
- Topic: How to block all IPs from specific domain?
- Replies: 5
- Views: 1243
Re: How to block all IPs from specific domain?
@Sergio - here is another IP from the same domain that has been blocked. There are hundreds of similar lines, so I copied all the ones that were different from each other. On another note, I don't understand why this is so challenging to do on CSF. On other FWs, you can simply put in a rule that es...
- 18 Jul 2023, 18:01
- Forum: General Discussion (csf)
- Topic: How to block all IPs from specific domain?
- Replies: 5
- Views: 1243
Re: How to block all IPs from specific domain?
@rolinger, the provided log lines can't help to block the IP at the first attempt, they are shown only when the IP has been blocked after (in your case) 5 failures. So, in your CSF go to to "Search System Logs" and select /var/log/messages and do a search for the IP 34.223.64.89 and give m...
- 17 Jul 2023, 15:24
- Forum: General Discussion (csf)
- Topic: How to block all IPs from specific domain?
- Replies: 5
- Views: 1243
Re: How to block all IPs from specific domain?
You can create a rule and add it to /usr/local/csf/bin/
If you can provide a log line from a recent attack, write it here and I will help you to create the CSF rule needed or an Spamassasin rulte for the same.
Sergio
If you can provide a log line from a recent attack, write it here and I will help you to create the CSF rule needed or an Spamassasin rulte for the same.
Sergio