ConfigServer Community Forum

Thanks, I'll make the change for the next release

Thank you. This has now been implemented in v5.20 As to the following update, neither the MD5SUM check (LF_INTEGRITY) nor the running process check (PT_DELETED) are affected at all by changing a binaries permissions or date. Only changing the contents of the binary affect these. This happens if eith...

You can add whatever command output you want using the PT_LOAD_ACTION option.

Thank you. This has now been implemented in v5.20

Thank you. This has now been implemented in v5.20

Thank you. This has now been implemented in v5.20

Now that we've enabled Virtual Pagination in the csf configuration UI, I'm not sure what benefit this would have.

Can I assume that the intrusion is being prevented by cxs and I shouldn't worry about these emails?

Yes. So long as the script definitely doesn't exist, then it doesn't pose a risk as far as we are aware.

After some extensive testing we've discovered a "feature" in ModSecurity where a cxs scan can report a seemingly non-existent script on a server which is being exploited. The symptoms: Web upload script user: nobody (99) Web upload script owner: () Web upload script: /home/user/public_html...

We're working on it The inclusion of pure-ftpd in BETA is great and we do have it working with it in development so far, but there's more to do.