ConfigServer Community Forum

Hi all, I've discovered a strange problem with all my Debian 9.3 servers with CSF/LFD latest version. I cannot ping via IPv4. It does ping via IPv6 though. Settings are as below. I also still can't ping when both servers are in the csf.allow and csf.deny files. ICMP_IN = "1" ICMP_IN_RATE =...

IGNORE_ALLOW should be kept at 0.

So the IP is in both files and you did a:
# csf -r
# systemctl restart lfd

And you still get alerted? Do the servers maybe connect to each other with IPv6 instead of IPv4?

1. Outgoing yes
2. https://www.configserver.com/cp/csf.html at the bottom is documentation
3. Yes if you are ready to use it
4. Login failure deamon
5. No (how do you manage your server?)

Yes it will!

Edit the /etc/csf/csf.conf and set the CC_OLDGEOLITE to 0. Restart csf.

firewalld runs independent of csf/lfd, you shouldn't need it.

Is it a standard installation or DirectAdmin etc.? What is in the /etc/csf/csf.deny file?

I believe it's not blocked because of csf (IP match in csf.allow, block may not work) but because of incorrect authentication data (password, protocol, certificate, cipher suite, etc.) Check your auth logs.

Block brute force failed SASL attempts. Debian 9, dovecot / postfix server. Error: Feb 16 08:13:32 mail02 postfix/submission/smtpd[4312]: warning: unknown[85.219.80.99]: SASL PLAIN authentication failed: Edit in /etc/csf/csf.conf: CUSTOM1_LOG = "/var/log/mail.log" Regular expression in /us...

I apologize for opening a bug report what was not a bug, but was indeed a misconfiguration. I did not know anything about these regexes. For people who have the same problem like me: - I've edited the /etc/csf/csf.conf and at the bottom added a custom log CUSTOM1_LOG = "/var/log/mail.log" ...