Hi there. I've noticed that the referenced URL in the section LF_EXPLOIT is not longer available:
http://www.cpanel.net/security/notes/ra ... olkit.html
Does this affects in any way the functionality of LF_EXPLOIT setting?
Search found 15 matches
- 19 May 2011, 12:04
- Forum: Suggestions (csf)
- Topic: LF_EXPLOIT still working?
- Replies: 2
- Views: 3357
- 01 Nov 2008, 22:28
- Forum: Suggestions (csf)
- Topic: IP addresses blocked forever after "can't fork"
- Replies: 3
- Views: 4940
lfd and csf already do track temporary IP addresses between runs. What probably happened is that lfd was killed while it was writing to the file that controls that (csf.tempban) and it resulted in an empty file. That's really an issue for the OS and the VPS since it would be unlikely to happen on a...
- 31 Oct 2008, 19:35
- Forum: Suggestions (csf)
- Topic: IP addresses blocked forever after "can't fork"
- Replies: 3
- Views: 4940
- 28 Oct 2008, 01:42
- Forum: Suggestions (csf)
- Topic: IP addresses blocked forever after "can't fork"
- Replies: 3
- Views: 4940
IP addresses blocked forever after "can't fork"
I've noticed in small boxes that after a lite DOS was occured and the system memory have reached its top value, the lfd hangs, "can't fork" errors are issued, lfd is dead, and the temporarily blocked IP addresses remain blocked in iptables. I've also noticed that that blocks are not cleare...
- 28 Oct 2008, 01:30
- Forum: Suggestions (csf)
- Topic: IP Deny logging to a database or post block/post remove hooks
- Replies: 18
- Views: 16752
Your idea sounds cool. It's cool to determine the origin IP's of recurrent port scanning and connection attempts. You may generate statistics on the frequency and procedence of them. Also, you can use shellexce via php to see what's happening in real time. You can generate a list of currently blocke...