ConfigServer Community Forum

Hello

I've installed Messenger v3 on my DA servers with CL7 and CL8, it works as on the cpanel server but if I block my own IP and access a site ober port 443 the page loads, if I access it over port 80 I get the message from the Messenger.

I have compared the configs of CP with DA and found out that the file /var/lib/csf/csf.conf is not filled with the vhosts.

I changed MESSENGERV3HTTPS_CONF...

I've just noticed the new Docker options in CSF under Docker Settings , if we enable these do we no longer need to add the following to /etc/csf/csfpre.sh ?

#!/bin/bash
iptables -t nat -N DOCKER
iptables -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
iptables -t nat -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
iptables -t nat -A POSTROUTING -s 172.17.0.0/16 !...

Anyone recommend which plugins/settings to use in combination with CSF for protecting Wordpress sites. It seems many of the security plugins are going to be overlapping with CSF functionality.

Hi,
I restart CSF + LFD and finally show:

● lfd.service - ConfigServer Firewall & Security - lfd
Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled)
Active: active (running) since Sat 2020-05-23 15:04:32 +0430; 4ms ago
Process: 29497 ExecStart=/usr/sbin/lfd (code=exited, status=0/SUCCESS)
Main PID: 29510 (lfd - starting)
CGroup:...

Hello ConfigServer Community, Longtime lurker, first time poster.

We use CSF as our go-to for a bunch of cPanel servers, and for a while now we've been tightening everything up by controlling them with Ansible. The general idea is that we have a CSF config template, apply it to a server (so that if policies change, all servers are updated and CSF is ensured to be running) and away we go.

I'm...

The title says it all i think.

When i want to unban an IP in the temp list i need it to be unbanned when working in a clustered csf.

am i missing a setting or is it a bug?

Is there a simple way to open all outbound UDP ports on a device only for destinations within the LAN? I know I could do it manually with iptables:
# iptables -I OUTPUT -p udp -d 192.168.0.0/24 -j ACCEPT
But is there a standard way to do this within CSF configuration?

Hello!

We got memcached installed on our server a few days ago, and we get from CSF, every hour, a mail with content like this:

Time: Fri May 8 22:16:11 2020 +0000
Account: memcached
Resource: Process Time
Exceeded: 77389 > 1800 (seconds)
Executable: /usr/bin/memcached
Command Line: /usr/bin/memcached -u memcached -p 11211 -m 2GB -c 1024 -l 127.0.0.1 -U 0
PID: 9582 (Parent PID:9582)
Killed: No...

Good morning friends...

I use CentOs 6.1 with CSF 14.2. I have two network cards, one external to connect to the Internet (PPPOE) and the internal network.

I am trying to open some ports (Port Forward) and forward them to my internal server (192.168.1.2).

For example. I need to open port 27015 and forward all the external Ip's that arrive to that port and forward to 192.168.1.2. I put some...

Hello friends.
I was looking at the Logs (/ var / log / messages) and this error message is appearing:

May 8 19:47:00 localdomain lfd : Integrated UI Service died, restarted
May 8 19:47:00 localdomain lfd : Child UI: Can't locate object method new via package IO :: Socket :: SSL at / usr / sbin / lfd line 9360.

I use CentOs 6.1 with CSF 14.2

Thx

I'm using CSF on a VPS running WHM/cPanel. Every 30 seconds /var/log/lfd.log logs this error:

RESTRICT_SYSLOG: *Error* No matching unix sockets found

Is this something to be concerned about? Google isn't shedding much light on the subject.

We cleared our iptables on centos before installing this firewall.
We opened up the ports we needed by the configuration in the firewall and saved them we made sure 3306 was left out. This is because we dont want 3306 to be open on our whm server however it seams it's being added to the allow list and shows as open when we double check the ports we opened there is no 3306
This makes me wonder...

Hello. We have a small server and every weekend or holiday, we see a spike of server intrusion tries. They know that most, mainly small and medium-sized companies probably leave their servers unassisted during those days. By blocking China, we cut tentative intrusions by 60%. But, there are those from Netherlands, France, Germany and other. We want them blocked permanently. No more temporary...

Hi all,
I would like to add inside txt file all remote IP addresses that CXS detects via SCAN because then I would like to block these IP addresses on my external firewall.
Has anyone had this need and can tell me how to do it or redirect me to some good manual/topic on the forum that talks about it (I tried to search but I found nothing about it)?

Thank you very much.

Hello,

I'm already registered ID from MaxMind. But everytime I get these error from my log

CC: Retrieving MaxMind Country database
CC Error: GeoLite2-Country-Blocks-IPv4.csv empty or missing
CC: Retrieving MaxMind ASN database
CC Error: GeoLite2-ASN-Blocks-IPv4.csv empty or missing

Everytime I put these files manualy but not help.

Any idea for this problem ?

Regards,
Bulent

Hello,

does OSM work on openvz node to track outgoing connections from containers and how can it be configured to monitor spammers on open vz vps nodes.

regards.

Hi,

I am looking for some added protection to make sure that if someone uploads a PDF it really is a PDF and that it is safe. PDF is one example, it could be one of many common file types. I am thinking that CXS could provide an added layer of protection by scanning a file as soon as it has been uploaded to the server from a form in a web application. It could then quarantine anything...

hello guys

I have a cpanel server that uses CSF, which blocks IP by noting the country of origin of said IP

by example : (show country of IP)

However, I have a problem with another server, where the IP Country is not shown

view example: (not show country)

How to solve this problem? I would like the country names to be shown as in the first image

Hello,

I'm experiencing a bug using CSF on cpanel CENTOS 7.7 v86.0.18 that is banning cloudflare ips.
I have enabled mod_cloudflare and it's working because I can see the real ip address of requests on Apache Status, but CSF is always banning cloudflare ip.
I also have enabled for the website that is getting flood and ddos attack cloudflare ban ip but I can't see that any ip address was added...

Configserver appears to by in the UK.

We have country code blocking in place using CSF (and have for 18 years...)

When we place in CC_DENY. PL,NL,FR,CN,RU,DE,AN,TR,HK,CH,FI,SE,DK,IE,SG,AU,BG,LV

Even though UK is not listed, updates fail and will never work again unless all removed. Is this a bug? Or are updates coming from a country other than UK?