Upgraded to cPanel 78.

lfd won't start

lfd : Main Process: Can't locate Net/DNS/Resolver/linux.pm in @INC (you may need to install the Net::DNS::Resolver::linux module)

Not really finding anything that uses Net::DNS::Resolver::linux - not sure what's going on.

Not seeing where anyone else has had this issue, and I'm sure I'm not the only one using cPanel 78 now. So have to believe it's...

Hi all,

Long time user of CSF and first time posting...

CSF on my WHM server attempted an auto upgrade overnight and failed with the following entry near the end of the emailed log:

Error: Invalid TCP_IN port , at line 3026 Job for lfd.service failed because the control process exited with error code. See systemctl status lfd.service and journalctl -xe for details.

Now I can't start the...

Hello,
i use CSF on a cPanel server in the current version. Without having changed anything, I was suddenly locked out today. Even changing the IP by restarting the DSL connection or access via smartphone (not WLAN) didn't bring any change - the server is/was not reachable, there was also no reaction to a simple PING. The only thing that helped was to run csf -x directly on the server console via...

Having an issue when trying to restart the CSF module.

Error: csf is being restarted, try again in a moment: Resource temporarily unavailable at /usr/sbin/csf line 175.

This is line 175
# start csflock
sub csflock {
my $lock = shift;
if ($lock eq lock ) {
sysopen ($CSFLOCKFILE, /var/lib/csf/csf.lock , O_RDWR | O_CREAT) or die ( Error: Unable to open csf lock file: $! );
flock...

Hi,

I can't get the CSF Messenger to work properly on my Plesk server for SSL websites.
When I navigate to a server IP address, not using SSL, I see the Messenger page telling me I'm blocked.
But when visiting any website on the server, all of which use SSL, the IP is not blocked.
Any idea?

Thanks!

An IP from China got caught by lfd trying to access a cpanel account. However, China is country blocked (CC_DENY), and the IP is in the blocked range, as confirmed by csf (csf -g output below). Can someone explain how the IP managed to access cpanel even though it is in iptables? Thanks.

csf -g 203.2.xxx.xxx

Table Chain num pkts bytes target prot opt in out source destination
No matches found...

Can someone assist putting together a custom regex for CSF? Log files below of the issue (IP used is arbitrary). CENTOS 7 server.

Log directory:
/var/log/exim_mainlog

2019-02-13 18:51:46.727 no MAIL in SMTP connection from :53797 I= :25 D=10s
2019-02-13 18:51:57.453 no MAIL in SMTP connection from :57662 I= :25 D=10s
2019-02-13 18:52:08.176 no MAIL in SMTP connection from :62178 I= :25 D=10s...

We have CSF installed on our server and it seems to block mail coming from our billing system. I have configured it to allow the SMTP PHP mail to go through. It starts working for a few days then starts blocking again. I have to reboot the CSF services for it to start working again then it does the same thing a few days later.

Is there any insight as to why this is happening?

hello guys,

when i enable Perform SMTP packet inspection osm daemon wont start

Feb 13 00:56:18 server3 osmd : daemon stopped
Feb 13 00:56:33 server3 osmd : daemon started
Feb 13 00:56:33 server3 osmd : Main Process: Can't locate Net/Pcap.pm in @INC (you may need to install the Net::Pcap module) (@INC contains: /etc/osm/Modules /usr/local/cpanel...

I've decided to start a new thread because I haven't seen any current working solution, or activity on older threads regarding this issue.

I have spent countless hours over the last 3 months trying to solve this issue with email that is getting blocked which comes from Gmail:

DNS Error: 91335 DNS type 'mx' lookup of localinternetads.com responded with code SERVFAIL

I've read through 3 dozen...

Hello,

I'm already using DYNDNS feature of CSF and it's really great.
Just asking, can I write a custom regex to protect /wp-login.php and accept the request to it only from my DYNDNS IP only?

Regards,

Hi,

CSF is installed and port 11211 was not open in CSF but still the refection attack was used successfully.

Did the install of memcached open port 11211 ?

Why did CSF not block this attack? Did CSF fail?

Regards,
Iken

Hello.

In my var/log/secure I got a lot of :

Feb 3 21:47:11 420215 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=limi@domain.lv rhost=125.122.251.16
Feb 3 21:47:13 420215 auth: pam_unix(dovecot:auth): check pass; user unknown

but csf not blocking this ip's. If i add manually then this messages stop for some time and then again with diffrent...

When I check WHM > ConfigServer Security & Firewall it shows it is stopped.

I can restart and it shows it is running but later when I check it's stopped again.

Any suggestions on where I can check to see what is causing the issue?

Hi folks,

We have a really unusual intermittent issue that is driving us crazy. We have a number of clients using O365 mail service for sending mail from their WordPress websites. We have a plug-in installed that sends and logs emails via SMTP to office 365 (Post SMTP aka postman) The plug-in is OK with diagnostic information and when this issue occurs, we can deduce that when it drops out the...