Search found 197 matches

by marcele
07 Oct 2014, 16:30
Forum: Suggestions (csf)
Topic: csf --graphs permissions
Replies: 1
Views: 2451

csf --graphs permissions

Just wondering if when csf graphs are generated if the files could have 644 permissions vs the 600 that they are now. This would allow them to be used in third party applications that are not running as root.
by marcele
06 Oct 2014, 20:25
Forum: Suggestions (csf)
Topic: csf --graphs saving images wrong
Replies: 5
Views: 5854

Re: csf --graphs saving images wrong

Sorry just realized that this should have been submitted in the bug reports section.
by marcele
05 Oct 2014, 13:48
Forum: Suggestions (csf)
Topic: csf --graphs saving images wrong
Replies: 5
Views: 5854

Re: csf --graphs saving images wrong

Just a note that adding the last slash will correct the issue:
csf --graphs disk /tmp/

Should probably just add the missing slash for the user if it is omitted.
by marcele
05 Oct 2014, 13:41
Forum: Suggestions (csf)
Topic: csf --graphs saving images wrong
Replies: 5
Views: 5854

csf --graphs saving images wrong

Running the command: csf --graphs disk /tmp charts.html, graphs.html is saved to /tmp correctly but all images are saved as: /tmplfd_cc.gif /tmplfd_hour.gif /tmplfd_month.gif /tmplfd_pie_day.gif /tmplfd_pie_hour.gif /tmplfd_pie_year.gif /tmplfd_systemday.gif /tmplfd_systemhour.gif /tmplfd_systemmont...
by marcele
01 Oct 2014, 18:12
Forum: Suggestions (csf)
Topic: Feature Request: block country by ipset nethash rule table
Replies: 15
Views: 12805

Re: Feature Request: block country by ipset nethash rule tab

You won't see ipset support in Openvz / Virtuozzo 2.6.32-x kernels. It might land in the 3.10-x kernels:

https://bugzilla.openvz.org/show_bug.cgi?id=2644
by marcele
01 Oct 2014, 17:16
Forum: Suggestions (csf)
Topic: Feature Request: block country by ipset nethash rule table
Replies: 15
Views: 12805

Re: Feature Request: block country by ipset nethash rule tab

The second link works for me. So far in my tests the new ipset stuff works great on Centos 6 (the required packages are in the epel repo (ipset libmnl)). It is going to be harder to get ipset working on Centos 5 however. It looks like it requires a newer iptables than the default. None of the third ...
by marcele
30 Sep 2014, 18:10
Forum: Suggestions (csf)
Topic: Feature Request: block country by ipset nethash rule table
Replies: 15
Views: 12805

Re: Feature Request: block country by ipset nethash rule tab

Congrats on the ipset support. Great job Chirpy!
by marcele
09 Aug 2014, 13:08
Forum: Suggestions (csf)
Topic: Feature Request: block country by ipset nethash rule table
Replies: 15
Views: 12805

Re: Feature Request: block country by ipset nethash rule tab

Some additional notes: 1. Most of the major distros now have ipset in their repos. Eg. For Centos its just a matter of turning on EPEL repo and doing "yum install ipset". 2. Ipset isn't supported in Openvz but they are working on it: https://bugzilla.openvz.org/show_bug.cgi?id=2644 Probabl...
by marcele
30 Jul 2014, 12:15
Forum: Suggestions (csf)
Topic: Feature Request: block country by ipset nethash rule table
Replies: 15
Views: 12805

Re: Feature Request: block country by ipset nethash rule tab

+1 for ipset support in CSF. I know this is an old feature request but from reading the docs it looks like it would be great for adding any large iptables sets like country or blocklists. The homepage: http://ipset.netfilter.org/index.html A good write up: http://blog.ls20.com/securing-your-server-u...
by marcele
26 Mar 2014, 13:24
Forum: General Discussion (csf)
Topic: Any way to block traffic on specific port only?
Replies: 1
Views: 2207

Re: Any way to block traffic on specific port only?

NF_Zac look at the LF_SELECT option in csf.conf