I have tested across a few accounts and it seems that when I put in for a RULE DISABLE for a certain account it is not working. If I put it in as a GLOBAL it is working.

I have checked the modsec/modsec2.user.conf is shows empty even though I have entries in for some of the accounts. Perhaps this is not the right place to look, but unless I put the rules to ignore in the GLOBAL, they are still...

Hello,

We're using CSF firewall on CentOS 6.10 server and isn't working as expected.

Here is the output of csftest:-
----------------
# /etc/csf/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...FAILED - Required for csf to function
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing...

I am referring from a topic that i could not solve at forum-level (i tried). [ ] :

on a directadmin-server with csf i experience that albeit csf.conf states:

TCP_IN = 20,21,25,30,53,80,110,123,143,443,465,587,953,993,995,1935,3000:3039,3478,3479,5001,5060:5099,5222,5269,5275,5349,7443,7070,7777,10000:20000,49160:49300

i find port 3306(TCP) accessible from outside unless mysqld is bound to...

Hello? I checked that the Mailscanner tool for being excellent in stopping viruses and 20% of spam in total, this tool if made available for the clerk to have access to Front-and, an option should not exist.

1. The client can however access the tab: Change individual domain settings, should not give it option to YES or NO! or any option, as we act with customers 24x7 abuses.

If this has the...

I would like to report spam emails to different providers besides just SpamCop. I have found that if I put in different destination email addresses, that the configuration page takes it, and I can go back to MailControl and press the Report to SpamCop and I will see MSFE report that it is doing Bulk Processing of Message IDs .... . However, no action happens besides this. No email sent log entry...

When reporting spam to SpamCop, please support a different FROM email address. By default, it uses the same one as other actions -- but if I want the FROM to be perhaps spam-reports@mydomain.com, so that replies can be routed back to a destination account of my choosing... this is not currently an option.

Could you please add a separate Spam Release email address: option?

Good Morning,

I installed CSF on a node which include a lot of VPSs, I'm using virtualizor and proxmox and I already allow all required ports and IPs, I even add 0.0.0.0/0 in the csf.allow but still VPSs IP got blocked once I started the CSF

I checked all the logs LFD, Audit and other logs to be sure that everything CSF is blocking is now enable such as ports and stuff like that.

and now I got...

Hi

I am a newbie with WHM and because of this I would like to verify my settings before making changes.

My goal is to restrict access to some essential ports (SSH, WHM login etc.) to just one country so that logins to these chosen ports is possible only from IP's from this chosen country but at the same time let HTTP and HTTPS traffic from anywhere and also make sure that WHM and csf updates...

Hi

Do I have a some way to see the IP address ranges that CSF downloads when I for example block traffic from some chosen country?

From where do CSF get these IP address ranges?

Hi Everyone,

I keep seeing these sorts of reports from cxs;

/home/gatesheadtutor/public_html/wp-content/plugins/ewww-image-optimizer/binaries/cwebp-fbsd'
Linux Binary/Executable

I was wondering how i can get cxs to ignore these files? I understand i have to modify the .ignore file and use something like hdir: /public_html/wp-content/plugins/ewww-image-optimizer/

Will that ignore the entire...

I am trying to setup OpenVPN with IPv6. This runs on a physical machine.

- eth0 has a /64 configured.
- tun0 has another /64 configured.

Both are part of the same /48.

- The physical machine is accessible over IPv6. It can also access the outside world.
- A VPN client receives an IPv6 address and can ping the physical machine.
- A VPN client cannot access anything else over IPv6.

csfpre.sh is...

Hi: Is there a way to view the messages in the quarantine in HTML format?

Hi, Sarah.
Some customers turned on the Auto Reply option in cPanel and all the no reply addresses are bounced back and stays there on the QUEUE waiting to be delivered for 4 days taking server time until them are discarded..

May I can add the no reply emails to a kind of outgoing mail blacklist, so, when an Auto Reply sends the email, MailScanner can delete it?

I was thinking something like:...

Do you have a place where to put any question about Outgoing spam monitor?

On the item View/Status page, where you inspect an entry in the MailScanner database via MSFE, please add support to view the appended headers... the headers added by MailScanner, SpamAssassin, and other milters. Right now they cannot be seen from MSFE, and one has to log into the users mailbox to view the appended headers that were added while processing the email in MailScanner & SpamAssassin....

This is a suggestion. When the UI is running in unrestricted mode, I know I am able to edit configuration files with the Edit Other button.

Edit files and scripts associated with cxs .

My suggestion is for CXS UI to read the configuration files for the Include directive and value, and then to allow editing of it through the UI.

For example, if my /etc/cxs/cxs.ignore contains a line like...

I am trying to implement SYNPROXY for the http/https ports with csfpre.sh

iptables -t raw -I PREROUTING -p tcp -m tcp --syn --dport 80 -j CT --notrack
iptables -t raw -I PREROUTING -p tcp -m tcp --syn --dport 443 -j CT --notrack
iptables -t filter -I INPUT -p tcp -m tcp --dport 80 -m state --state INVALID,UNTRACKED -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460
iptables -t filter -I...

Hi,

I put the IP 1.46.135.207 into deny list. However, this IP can still access my Wordpress site of the server.

How can this possibly occur?

Are there any solutions to block it?

regards,
Sounay

Hello everybody,

we use the filename filtering to block .doc files. .docx should not be blocked.

The problem is, if the filename matches some special criterias, it will be recognized as a .doc file by Mailscanner even though it is a .docx file.

I found several criteria, which will trigger that bug :

- The filename contains ä, ü, ö (e.g. töst.docx is recognized as .doc file)
- The filename...

1st, Thanks for great product.

Is there anyway to include faulting account/email name in firewall deny ip list?