This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
hello, why was my mailscanner thread deleted? that was an issue i reported, and it pretty much has impact. it's a paid service, and i think that reporting bugs ... is a good thing?
I get Process Status reports at least once a day about exim
- Event Summary:
USER: mailnull
PID : 23706
CMD : /usr/sbin/exim
CPU%: 0 (limit: 85)
MEM%: 0 (limit: 15)
PROCS: 16 (limit: 10)
Which is correct HOWEVER I placed the following in csf.pignore via the interface and restarted
exe:/usr/sbin/exim
cmd:/usr/sbin/exim
user:mailnull
But lfd is STILL killing exim. Is there something I'm missing?
I've allowed an IP of a client who often generates pop3 login failures due to there being many users at a single location.
If they do something that would result in them getting blocked, such as repeat pop3 login failures, lfd still picks this behaviour up and sends me an email as would be received when an IP gets blocked.
It doesn't really matter since the IP doesn't get blocked, however I...
Running latest csf, RHEL 4.4, latest kernel, generic linux
We have an application that ssh's into a server every hour. We'll see this being logged in lfd.log and ignored as it should, then suddenly the logging stops in lfd.log, even though the logins continue. During these times, actual brute force attacks go unblocked as well. A service lfd restart seems to jumpstart things again.
I've installed csf to my VPS, then all hosted sites can't not be displayed and are getting Gateway Timeout.
And always getting SSH Error, The current connection has timeout when trying to login to SSH.
I'd be so appreciative if I get any recommendations.
I have a PHP script that uses mail() to send out shipping confirmations to customers whose order shipped. Typically there are anywhere from 250 - 350 emails sent each day. After each mailing I receive an lfd: Script Alert email and in the email the line that says
Count: 101 emails sent
always has 101 as the number of emails sent no matter how many emails were actually sent out.
Hi,
just want to report somenthing that I am having in my CSF.
I have set LF_TRIGGER = 0, in order for me to set the cumulative failures in each of the following commands. So, I set the LF_POP3D = 20, but for some reazon it is not working.
Look at this print screen:
Wed Dec 20 11:06:18 2006 lfd: Failed POP3 login from 189.165.74.10 - 1 failure(s) in the last 105 secs
Wed Dec 20 11:07:40 2006...
My mailbox is getting flooded with warnings about suspicious proccesses running on my server.However this is false that process is not malicious and normal ......
I've been using csf+lfd for a while now, and just recently installed it on the server I take Modernbill orders from. I noticed that orders with credit cards fail, and it seems to be because csf is blocking port 443 outbound to them. I haven't changed any configuration options -- 443 should be open both in and out, but for some reason the customers are still getting blocked. The modernbill...
I'm having an odd problem when I try to run the security check in csf. It gets down to the point of Check shell limits and then I get a popup box notifying me that the site has sent an incorrect Message Authentication Code. No other area in WHM, or any other website has ever thrown this message up in my direction before, so I am not exactly sure what is going on. I am currently running CSF v2.50,...
When adding an IP in Firewall Allow IP you can edit the csf.allow file, but after adding an IP and not putting an empty line under the newly added IP and later on adding another IP on Quick Allow , the csf.allow file will be edited with an error.
How to reproduce
Lets say I edit the Firewall Allo IP file and add the IP 192.168.0.1 and later on I add the IP 192.168.0.2 , the csf.allow will add...
hi,
i may be wrong on this.
CSF checks Check php open_basedir protection and those who have enabled this have Green indication in CSF server security check Report .
but phpinfo still shows
open_basedir no value no value
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum