Search found 665 matches
- 23 Feb 2012, 11:26
- Forum: Suggestions (csf)
- Topic: seperate interface naming and bogon exlusion
- Replies: 7
- Views: 7883
Re: seperate interface naming and bogon exlusion
We've added the LF_BOGON_SKIP option to cater for the bogon issue.
- 23 Feb 2012, 10:24
- Forum: Suggestions (csf)
- Topic: please add blackberry server IP's to permanent whitelist
- Replies: 4
- Views: 6587
Re: please add blackberry server IP's to permanent whitelist
We have no intention of adding lists of IP addresses by default to csf. If you want to whitelist a set of addresses, you're free to add whatever you want. If you find IP addresses are being blocked, then you need to establish why and resolve that issue (e.g. if they're connecting to a closed port).
- 26 Jan 2012, 10:51
- Forum: MailScanner
- Topic: /tmp got full
- Replies: 1
- Views: 3458
Re: /tmp got full
This has nothing to do with MailScanner, so we cannot help with the issue here.
- 26 Jan 2012, 10:51
- Forum: Suggestions (csf)
- Topic: seperate interface naming and bogon exlusion
- Replies: 7
- Views: 7883
Re: seperate interface naming and bogon exlusion
You cannot selectively disable features per NIC. The only option in csf would be to add the local NIC to ETH_DEVICE_SKIP if you want to ignore traffic on it.
- 26 Jan 2012, 10:22
- Forum: Suggestions (csf)
- Topic: Add SHOW FULL PROCESSLIST to LFD Alert
- Replies: 3
- Views: 4791
Re: Add SHOW FULL PROCESSLIST to LFD Alert
You need to create a script that issues the command that you want and then add the path to that script into that option as explained in csf.conf.
- 26 Jan 2012, 10:16
- Forum: Suggestions (csf)
- Topic: connection limit per IP range
- Replies: 1
- Views: 3036
Re: connection limit per IP range
Yes, using the CONNLIMIT feature in csf.conf
- 26 Jan 2012, 10:13
- Forum: General Discussion (csf)
- Topic: blocked for port scanning While using FTP to send files
- Replies: 4
- Views: 6094
Re: blocked for port scanning While using FTP to send files
That would suggest FTP connection tracking is not working in your kernel and you will have to implement the open port workaround mentioned in the readme.txt
- 26 Jan 2012, 10:04
- Forum: Suggestions (csf)
- Topic: Auto-expire IP Blocks Based on specified criteria
- Replies: 1
- Views: 3076
Re: Auto-expire IP Blocks Based on specified criteria
It's not possible within the product. You might be able to rig something up using a hook script using the BLOCK_REPORT feature of csf.
- 27 Dec 2011, 09:44
- Forum: Suggestions (csf)
- Topic: Add SHOW FULL PROCESSLIST to LFD Alert
- Replies: 3
- Views: 4791
Re: Add SHOW FULL PROCESSLIST to LFD Alert
You can add that yourself using PT_USER_ACTION.
- 27 Dec 2011, 09:40
- Forum: Suggestions (csf)
- Topic: Update notifications?
- Replies: 3
- Views: 4332
Re: Update notifications?
The blog is our method of release notification and the only we we do this.