ConfigServer Community Forum

Since upgrading to cPanel/WHM version 100, some (all?) dovecot login failures are no longer being caught by lfd. It appears that the log entries have changed eg

vps dovecot: imap-login: Aborted login (auth failed, 2 attempts in 17 secs):

has become:

vps dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 2 attempts in 11 secs):

There is a reference to this in...

In my testing I wasn't able to get the LF_BIND login failure trigger to work. After checking some Centos7 and Centos 8 servers it looks like the BIND trigger in RegexMain.pm doesn't account for the hex value e.g. (@0x7f18041004f0) that is logged in Bind 9+ servers.

Broken (Currently used):

Fixed (I just added the (?: \S+)? to add a non-capturing group that is optional):

I hope this helps!

In my testing I wasn't able to get the MESSENGERV3 to work correctly on Debian/Ubuntu servers (It can't find the SSL certificates). It looks like there is a bug in the Messenger.pm conftree function because it can't process the relative includes used by default on Debian/Ubuntu.

The config used in /etc/csf/csf.conf :

MESSENGERV3 = 1
MESSENGERV3LOCATION = /etc/apache2/conf-enabled/...

Hi guys,
When you search for an IP using the Search for IP / Search iptables for IP address function and it picks up an IP that is blocked, an Unblock button appears below the search results.

However, when the same IP is inside the temporary or full Allow IP list, the Unblock button not only removes the IP from the blocked list, but from the allow list as well.
Please make it so that the Unblock...

In my testing I wasn't able to get the LF_APACHE_404 login failure trigger to work. I'm not sure if this is just a Plesk server issue or if this bug applies to Cpanel servers too.

From the stackoverflow post below it looks like in Apache 2.4.1 the 404 error code was demoted from the core:error to core:info log level as 404 errors are not logged to the error_log by default unless you set LogLevel...

Hello!

Since las Tuesday, CSF can't geolocate Spanish IP addresses when executing this:

csf -i 81.202.228.230

This commando retusn this:

# csf -i 81.202.228.230
81.202.228.230 (81.202.228.230.dyn.user.ono.com)

while in other countries it works welll, for example...:

## csf -i 8.8.8.8
8.8.8.8 (US/United States/dns.google)

We noticed that if we modify the database file like this:

echo...

Hi,

It seems that after installing CSF (using install.sh) script and then installing as Webmin module from /usr/local/csf/csfwebmin.tgz the link to csfimages is broken. The target ( /usr/local/csf/lib/webmin/csf/images ) NEVER there, and thus UI looks broken - no stylesheets are loaded, no images (errors are well seen in browser's console). It seems that generic install.sh script isn't copying...

Hi,

My CSF UI is broken. Try to inspect element on my chrome and get error on index line 168

There is no error on lfd log. And i just set TESTING=0, enable UI, fill username password and allow my ip for UI_PORT on csf.allow.

After enabling MESSENGERV3 on a Plesk server apache logs are full of these errors:

(13)Permission denied: AH00686: cannot read directory for multi: /home/csf/public_html/
(13)Permission denied: AH00686: cannot read directory for multi: /home/csf/public_html/
(13)Permission denied: AH00686: cannot read directory for multi: /home/csf/public_html/
(13)Permission denied: AH00686: cannot read...

After installing CSF on a CentOS 8 server with DirectAdmin, it is not running after setting Testing mode to Off .

In control panel it says Firewall Status: Enabled but Stopped , when clicking Start it does not really start.

Then in shell when I do systemctl start csf.service , it still does not start:

# systemctl status csf.service
? csf.service - ConfigServer Firewall & Security - csf...

On v13.06 Search System Logs page, a javascript error is produced in all cases due to the lack of the timer pause button id= CSFpauseID . While the pause button is omitted, the rest of the timer code is running and cannot set the missing timer button.

csf.cgi:2284 Uncaught TypeError: Cannot set property 'innerHTML' of null
at CSFpausetimer (csf.cgi:2284)
at csf.cgi:2480

I was able to...

Hi,

There is a bug in your `DisplayUI.pm` file on line 1398 (v13.04), where you print `No logs entries`.

Currently it looks like:

print No logs entries found \n ;

while it should be with

print No logs entries found \n ;

Therefore closing should be .

Thanks.

When using the cluster function csf --ctempdeny the comment is missing from the entry that is added:

To test:

csf --ctempdeny 203.0.113.1 3600 -p 3306 -d in 'This is the comment'

The entry that is added across the cluster:

lfd - Cluster member XXX.XXX.XXX.XXX (CA/Canada/web0.myserver.com) said, TEMPDENY 203.0.113.1, Reason:

I tired to enable the new docker support after upgrading to CSF 12.00 and remove our old csfpost.sh but I get this when I try to restart CSF on our Plesk server (using csf generic). It looks like the docker0 device isn't being passed to the new rules? In our upgraded csf.conf there was no DOCKER_DEVICE setting present in the config file.

# csf -r
Bad argument `MASQUERADE'
Try `iptables -h' or...

Hey chirpy,

It looks like there is a javascript error on the cloudflare UI page on CSF v11.01 which prevents the UI from working properly. In Firefox and chrome I see this in the browser console on the cloudflare UI page:

TypeError: $(...).chosen is not a function yMq3wnv0pfUc5kjFZIOxejZkGj:44:3

Once javascript breaks the code below doesn't get a chance to re-enable all buttons even though...