Had this message in the rkhunter log this morning for the first time.
Is it a worry?
TY!
Search found 42 matches
- 04 Apr 2016, 12:20
- Forum: Suggestions (csf)
- Topic: Suggestion: Run a custom script after ban and unban
- Replies: 3
- Views: 5336
Re: Suggestion: Run a custom script after ban and unban
There's a script to ban using BLOCK_REPORT detailed here: http://www.aetherweb.co.uk/automatically-adding-configserver-firewall-csf-firewall-blocks-to-cloudflare/ But ideally CSF could have a couple of config options for CloudFlare API and user account so it can do something like this automatically ...
- 26 Feb 2016, 09:21
- Forum: General Discussion (csf)
- Topic: CloudFlare?
- Replies: 10
- Views: 12943
Re: CloudFlare?
Hi nics, in fact you were right and I was wrong. Despite having mod_cloudflare installed the problem was not resolved. It did mean LFD was seeing, reporting and blocking the true IP via CSF... but mod_cloudflare was not affecting the IP seen by CSF at the firewall. So the blocks were totally ineffec...
- 23 Feb 2016, 22:25
- Forum: General Discussion (csf)
- Topic: BLOCK REPORT
- Replies: 2
- Views: 2563
Re: BLOCK REPORT
Ah.
Well, I triggered an LFD block. And it didn't work either. I guess I'm still doing something wrong.
in the BLOCK REPORT I have set it up as, literally:
sh /mypath/myscript.sh
Should I just have
/mypath/myscript.sh
?
TY!
Well, I triggered an LFD block. And it didn't work either. I guess I'm still doing something wrong.
in the BLOCK REPORT I have set it up as, literally:
sh /mypath/myscript.sh
Should I just have
/mypath/myscript.sh
?
TY!
- 23 Feb 2016, 18:23
- Forum: General Discussion (csf)
- Topic: BLOCK REPORT
- Replies: 2
- Views: 2563
BLOCK REPORT
Does CSF/LFD only trigger BLOCK REPORT script execution when LFD blocks an IP? I've set up a script to take an action on receipt of notification of a blocked IP. Run manually from the command line it works fine like this: sh myscript.sh 1.1.1.1 The script is owned by root and has permissions set to ...
- 05 Oct 2015, 12:08
- Forum: Report Bugs (cmc)
- Topic: New cmc v2.00
- Replies: 5
- Views: 14090
Re: New cmc v2.00
Me too, thank you!!
- 05 Oct 2015, 11:38
- Forum: Report Bugs (cmc)
- Topic: New cmc v2.00
- Replies: 5
- Views: 14090
Re: New cmc v2.00
Me too
- 10 Aug 2015, 09:05
- Forum: General Discussion (csf)
- Topic: CloudFlare?
- Replies: 10
- Views: 12943
Re: CloudFlare?
See link in my last post. CloudFlare provide an Apache module to resolve this issue.
Note however that in my experience, installing the module and restarting Apache made matters worse - but a server reboot solved it.
The remote IP now is correctly reported in all places I believe.
Note however that in my experience, installing the module and restarting Apache made matters worse - but a server reboot solved it.
The remote IP now is correctly reported in all places I believe.
- 29 Jun 2015, 14:40
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT and GOOGLEMAIL GMAIL Send As
- Replies: 5
- Views: 4088
Re: SMTPAUTH_RESTRICT and GOOGLEMAIL GMAIL Send As
For the moment I've solved this by using PHP to create a file if a change has occurred.
One minute after the PHP runs (by CRON) another cron task runs. If the file exists it restarts CSF and LFD with:
csf -r
etc/init.d/lfd restart
And then deletes the trigger file.
One minute after the PHP runs (by CRON) another cron task runs. If the file exists it restarts CSF and LFD with:
csf -r
etc/init.d/lfd restart
And then deletes the trigger file.
- 29 Jun 2015, 11:31
- Forum: General Discussion (csf)
- Topic: SMTPAUTH_RESTRICT and GOOGLEMAIL GMAIL Send As
- Replies: 5
- Views: 4088
Re: SMTPAUTH_RESTRICT and GOOGLEMAIL GMAIL Send As
I've coded up a PHP cron task now to grab the SPF records, compare with existing records in the csf.smtpauth file and update only if needed - and email me if so, so that I can manually cause a restart. Code I've written for this is available here, feel free to use it: http://www.aetherweb.co.uk/bloc...