hello,
there is any way to exclude single email address account (email@domain.com) to LF_DISTSMTP check ? i have email account use from different server ( about 30 different ip ) but i don't want to add this ip to ignore list.
thanks

hi
I want to close the whole country code but open all Owner CIDR google and yahoo and msn,bing on csf

please guide me

In Mailscanner Front End > Mail Control, if I run a search it only shows messages from the last month. Is there a way to extend this so it shows older messages?

Hello folks,
I notice when i'm scanning my hosting server with nmap inside of msfconsole , it put the ip of attacker in whitelist even if this ip is in blacklist.
please how to solve that???
thank you

Hi,

Not sure if this is in the right forum or not, sorry!

Basically when I am checking the server security with CSF it states 'Check nameservers Unable to resolve nameserver ' under the 'WHM Settings Check' section. This only appears on running the 'Run again and display all checks' report but under the 'Run again' report it doesn't appear. The nameserver ns1.yourdomain.com (I'm using...

Hi,

Searched the forum but could not find any answer to the following question:

Would an allow ip superseed a country block?

Scenario: We have actively blocked DE (Germany) through a country block, but want to allow one static ip from Germany to be allowed using Firewall Allow IP .

Would this work?

Hope to hear from you soon.

With best regards,

Piet Nutbey

The cXs Installer does not check for ClamAV before continuing. I think that the installer should check for ClamAV installation first, before continuing and then exit if it is not present with a warning to the user that it can't install until ClamAV has been installed first.

Hi folks!

A bit of a general question, I was wondering if when an IP is blocked in CSF (or by LFD), does it block incoming DNS queries by default or do I need to allow them to make queries?

I can't find this documented anywhere.

Kind regards,
Jess

Hello, CSF is blocking ftp upload to my OVH remote backup destination. Backup transfer is set as ftp on port 21.
Destination is validated and working when csf is disabled. Any clue how can I fix this?
Thanks!

Hello.

After looking at some fresh csf.conf file I detected I was missing some stuff in my own csf.conf files.
Some were logical because they were only for cPanel.

Somewhere on the forums in a very old topic, I read that queue alert/interface was also only for cPanel because this worked with exim.

However, Directadmin is also using Exim mailserver.
Next to that I think script alert could also...

Hello,

Can I Block POST request if it contains a specific word or some words?

Regards,

Please do not bump threads

Brief explanation:

We use CSF+LFD on all of our Linux based servers of which are endpoints, in that they are not required to do any IP forwarding/routing. (We'd use Shorewall for that.) This includes our internal office servers.

We also use two Unbound instances as our office DNS resolver, particularly as we have various internal only DNS mappings we need to establish.

I have however noticed...

I'm using a third party mail server to send emails for the domains hosted on the VPS. They provide MX, TXT, CNAME records (without any IP address) to add in the DNS zone file for each domain, which I did successfully and emails are being sent by the PHP script using SMTP authentication.

Thus, I have disabled all email related services (Postfix, Dovecot, etc.). As a result, I'm not getting system...

I had hundreds of http connections from the abusive IP and added IP to csf.deny. Apache status page however continued showing connections from this IP. I restarted services and killed processes without any luck. I had to add IP to CloudFlare firewall to stop the connections. Is there a certain attack rate that makes CSF and software firewall useless for this case?

I keep getting this error page when I try to Enable | Start the cxs Watch ...
Software error:

open3: exec of /usr/sbin/service cxswatch start failed: No such file or directory at /etc/cxs/ConfigServer/cxsServices.pm line 351.

For help, please send mail to this site's webmaster, giving this error message and the time and date of the error.

looks like something to do with the perl module...

Hestia CP is fork of Vesta CP.

Vesta CP - Support added in CSF v13.05 ( changelog )
Hestia CP - Support will be added in which CSF version?

I was able to get CSF working on Hestia CP using the following simple sed snippet (from within the install directory):
find . -type f -exec sed -i 's/VESTA/HESTIA/g' {} + && \
find . -type f -exec sed -i 's/Vesta/Hestia/g' {} + && \
find . -type f -exec...

Hoping someone can provide a quick answer to this.

I've installed csf on amazon linux 2 latest version. When attempting to start it it's failing with the following message:

Oct 07 15:32:54 dev-ci-single-11.189 csf : open3: exec of is-active firewalld failed at /usr/sbin/csf line 906.
Oct 07 15:32:54 dev-ci-single-11.189 systemd : csf.service: main process exited, code=exited,...

Anyone who has added Comodo WAF (CWAF for WHM/Cpanel) have any issues running it with Configserver at the same time? Or does Comodo WAF have too many potential issues?

Since 99% of our CSF use is to block IPs it would sure be nice if CSF would remember what tab we have chosen. We always select the CSF tag to keep the Block IP field at the top, otherwise we have to scroll down to get to it. When we block an IP and return to the main page our tab selection is lost.

Thanks for an amazing product!

Dana

Hello!

We use CSF on 30+ servers since very long time ago, always without any serious issues. Only a few months ago, randomly LFD process just stops (many servers affected), giving this message and error bellow:

Oct 4 09:52:20 sh1 lfd : iptables appears to have been flushed - running *csf startup*...
Oct 4 09:52:28 sh1 lfd : csf startup completed
Oct 4 09:52:28 sh1 lfd : *Error* csf reported an...