Search found 665 matches

by chirpy
23 Feb 2012, 11:26
Forum: Suggestions (csf)
Topic: seperate interface naming and bogon exlusion
Replies: 7
Views: 6045

Re: seperate interface naming and bogon exlusion

We've added the LF_BOGON_SKIP option to cater for the bogon issue.
by chirpy
23 Feb 2012, 10:24
Forum: Suggestions (csf)
Topic: please add blackberry server IP's to permanent whitelist
Replies: 4
Views: 5516

Re: please add blackberry server IP's to permanent whitelist

We have no intention of adding lists of IP addresses by default to csf. If you want to whitelist a set of addresses, you're free to add whatever you want. If you find IP addresses are being blocked, then you need to establish why and resolve that issue (e.g. if they're connecting to a closed port).
by chirpy
26 Jan 2012, 10:51
Forum: MailScanner
Topic: /tmp got full
Replies: 1
Views: 2640

Re: /tmp got full

This has nothing to do with MailScanner, so we cannot help with the issue here.
by chirpy
26 Jan 2012, 10:51
Forum: Suggestions (csf)
Topic: seperate interface naming and bogon exlusion
Replies: 7
Views: 6045

Re: seperate interface naming and bogon exlusion

You cannot selectively disable features per NIC. The only option in csf would be to add the local NIC to ETH_DEVICE_SKIP if you want to ignore traffic on it.
by chirpy
26 Jan 2012, 10:22
Forum: Suggestions (csf)
Topic: Add SHOW FULL PROCESSLIST to LFD Alert
Replies: 3
Views: 3765

Re: Add SHOW FULL PROCESSLIST to LFD Alert

You need to create a script that issues the command that you want and then add the path to that script into that option as explained in csf.conf.
by chirpy
26 Jan 2012, 10:16
Forum: Suggestions (csf)
Topic: connection limit per IP range
Replies: 1
Views: 2289

Re: connection limit per IP range

Yes, using the CONNLIMIT feature in csf.conf
by chirpy
26 Jan 2012, 10:13
Forum: General Discussion (csf)
Topic: blocked for port scanning While using FTP to send files
Replies: 4
Views: 4509

Re: blocked for port scanning While using FTP to send files

That would suggest FTP connection tracking is not working in your kernel and you will have to implement the open port workaround mentioned in the readme.txt
by chirpy
26 Jan 2012, 10:04
Forum: Suggestions (csf)
Topic: Auto-expire IP Blocks Based on specified criteria
Replies: 1
Views: 2335

Re: Auto-expire IP Blocks Based on specified criteria

It's not possible within the product. You might be able to rig something up using a hook script using the BLOCK_REPORT feature of csf.
by chirpy
27 Dec 2011, 09:44
Forum: Suggestions (csf)
Topic: Add SHOW FULL PROCESSLIST to LFD Alert
Replies: 3
Views: 3765

Re: Add SHOW FULL PROCESSLIST to LFD Alert

You can add that yourself using PT_USER_ACTION.
by chirpy
27 Dec 2011, 09:40
Forum: Suggestions (csf)
Topic: Update notifications?
Replies: 3
Views: 3000

Re: Update notifications?

The blog is our method of release notification and the only we we do this.