On our old servers we only every got a daily csx email if there was something to be alerted about. On our new server we get an email everyday even if there are no issues - a blank /empty email with just the command at the top.

----------- SCAN REPORT -----------
TimeStamp: Fri, 26 Jul 2019 00:00:02 -0400
(/usr/sbin/cxs --allusers --nobayes --clamdsock /var/clamd --ctime 25 --dbreport...

I'm trying to come up with a solution to get a developer that has a dynamic IP through the firewall whenever he tries to access the server. I thought I could give him access to the web UI so he could add his IP whenever it changes but that requires his IP to get access in the first place. Is there some other solution?

This option can mask a users real IP address and hinder security. You should disable WHM > Tweak Settings > Proxy subdomains

This option in WHM doesn't seem to exist anymore or has since been renamed because I'm not able to find it. Very few results for proxy with none of them to do with what I'm actually looking for.

Any ideas?

Hello,

Since csf/lfd is very important for my server security, I would like with a monitoring script to ensure that csf and lfd are both running and operational. Is there a recommended way to do this ? I am running CentOS 7.
I am thinking about:
- either parsing the output of command systemctl status csf lfd and detect that they are active, and also running for lfd.
- either parsing the output...

Hello,

Would it be possible to include blocks from cPhulk brute force protection on the reCAPTCHA unblocking ?

That would be neat if feasible!
:)

Hi,

I've had good success at setting the csf.service to delay the start of csf for three minutes after rebooting the server.

This has been done as a last resort in case the service completely locks me out for some reason. At least that way I can reboot the server and have a three minute window to log in before a failed csf configuration or update locks me out.

My question for discussion is...

PT_USERRSS - Set to 0 to disable this feature.

Even when set to 0, getting email alerts like :

User:userid PID:number PPID:number Run Time:11(secs) Memory:253764(kb) RSS:59684(kb) exe:/opt/cpanel/ea-php56/root/usr/bin/php-cgi cmd:/opt/cpanel/ea-php56/root/usr/bin/php-cgi

Hello Dears,

i need help with this,

is there a way to receive alert email to the server administrator contact like the one we get for login failures or Cpanel access, or whm access, but this one to be for webmail access,

we already receive an alert for SMTP and Webmail login failures, but is there a way to get the notifications for the successful logins on webmail as well,

any ideas are...

Love Mail Queues and I'm currently using it under CPanel. However my host will be migrating to InterWorx and I'm inquiring about support for that interface.

Love MailScanner and I'm currently using it under CPanel. However my host will be migrating to InterWorx and I'm inquiring about support for that interface.

Hello,

i would like to exclude one domain or more from Country Code Lists and Settings, because i would like to deny access on spesific countries for whole server, but i want spesific some websites to have access globally. Can i do that somewhey through CSF ?

Hi,

I'm trying to only allow canadian IPs on our server with the exception of some IPs.

It seems though that this takes precedence over the IPs listed in the firewall allow IPs. Is there a way around this?

I have configured CSF on a Bitnami/Ubuntu instance (AWS Lightsail) and am noticing an oddity. I disable the AWS firewall so it is not interfering. I disable UFW that comes with Ubuntu just to be sure. I then set the port for UI and enable UI. I also add my IP to the ui.allow. But i am still unable to connect to UI until I add the port to TCP_IN which the directions say i shouldn't do ever. But i...

Greetings,

I'm running csf on a vps with Centos 7. I've configured csf.conf to block connections from Russia with the following statement:

CC_DENY = RU

Restarted csf with csf -r many times, yet I still see an IP from Russia connecting to my server. Here's what the restart logs reads:

CC_DENY all opt -- in !lo out * 0.0.0.0/0 -> 0.0.0.0/0

What am I missing? I think it's a very beneficial...

hello,

our server is keeping attacked by huge amount of vicious visiting. Upon Cpanel's instructions, we installed CSF, but don't find a place to configure to block UNKNOWN future vicious IPs. They change IPs frequently, so how to block unknown future vicious IPs that visit very frequently?

tks for your great help.

******cpanel records*******
our websites keep down frequently. every time we...

Howdy, All,

A few questions on MailScanner. Using v5.0.2

Have some inbound mail from folks using Microsoft servers, and they're being marked as spam based on their IP existing in the Spamhaus SBL. Trying to mitigate that without changing URIBL_SBL too much.

As I understand it, /usr/mailscanner/etc/rules/scan.messages.rules is global, used for bypassing scanning of any sort.

Wondering if use...

csf v12.12 running under cPanel & WHM v80.0.18 on CentOS v7.6

Randomly, but very frequently, when you go to:

and especially after a csf+lfd or lfd restart, the page fails to load and gives a blank page.

It often takes multiple page reloads or a Resend to get the page to finally load.

Hi guys.

I want to know if it's possible to have an option to EXCL:UDE CLEAN user accounts from the report we receive via email?
This way, we can get a more concise report and easier to scroll when reading from mobile device.

Thanks.

Hi guys.

I just noticed that the scan DAILY is also launched at the same time than the WEEKLY.
Ressources wise, I would prefer if I can have more control over the cron like:
- daily scan from days 0 to 5 (Monday through Saturday)
- weekly scan on day 6 (Sunday)

Do you have a suggestion ?

BTW, your CXS is INCREDIBLE !! It founded many vulnerabilities when I was sure I had none on my servers....

csf is currently restarting - command skipped on line 3416

Hello,

I've recently updated cPanel to the latest version after the exim bug, since then my CSF is acting up and restarting after every 5 to 15 minutes and this goes on constantly. Probably it wasn't a solution to my issue but I uninstalled CSF and installed it again. But the issue still persists.

Every time it restarts in CSF...