2778 topics
Page 1 of 139
Topics
Replies
Views
Last post
Custom REGEX rules for CSF.
by
Sergio » 21 Feb 2014, 13:55
Hi all,
this thread is to add working REGEX that we can share with the community. To add them to this sticky, you should have the regex working in your server, this thread is not intended to solve any issues related with no working regex, the intention is to give users of CSF REGEXs that could make CSF with more security options.
If you want to collaborate, please add your rule to this thread...
45
41353
Resolving individual IP drop/accept in iptables
by
chirpy » 17 Apr 2010, 09:34
If you have one particular IP address that is either dropped or accepted through the firewall that you think should not be, then you can use the new WATCH_MODE in csf.
Before enabling this option and using the CLI command to watch an IP address, check whether it is explicitly listed first using:
csf --grep 11.22.33.44
Where 11.22.33.44 is the IP address you're tracking. If that comes...
0
9084
Server inaccessible with default installation
by
chirpy » 13 Mar 2009, 10:39
So long as you use the default configuration and only change the TESTING parameter in csf.conf then csf should work.
If it doesn't, it suggests a problem with the server environment (kernel, iptables or in the case of a VPS, the host node configuration of the VPS).
If the issue appears to be broken iptables connection tracking in the kernel (e.g. blocking allowed ports such as port 80 for...
0
9692
Process Tracking and csf.pignore
by
chirpy » 17 Jan 2009, 15:46
1. If you're seeing legitimate spamd processes on cPanel being reported and want to ignore them, the following can be added to /etc/csf/csf.pignore:
cmd:spamd child
Then restart lfd.
2. If you're seeing legitimate awstats processes on cPanel being reported and want to ignore them, the following can be added to /etc/csf/csf.pignore:
pcmd:/usr/local/cpanel/3rdparty/bin/awstats\.pl.*...
0
87032
VPS iptables problems
by
chirpy » 22 Jan 2007, 11:32
If you get iptables errors when trying to start csf on a VPS then you most likely have missing iptables modules for your VPS.
If your hosting provider wants to know how to configure iptables correctly on a VPS server, then you should point them to this Parallels FAQ and have them follow it (plus to add ip_conntrack_ftp to the list of required modules):
csf requires at least these iptables...
0
34185
Gmail blocked for dist. smtp logins
Today several gmail servers were blocked for distributed SMTP Logins on a user account.
Fact was this user was sending an invitation from her Gmail address via her domain on our servers to several friends of her.
This should not be blocked, because it's a valid login. But several Gmail ip's got blocked.
IP Addresses Blocked:
209.85.213.49 (US/United States/mail-vk0-f49.google.com)...
0
17
CC_ALLOW_FILTER and ipset
I have several WHM servers and I am trying to use the CC_ALLOW_FILTER but it is not working. ipset is installed and LF_IPSET is set to on and when I restart csf I see the error:
csf: IPSET creating set cc_us
RETURN all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 match-set cc_us src
csf: IPSET loading set cc_us with 66677 entries
IPSET:
Anyone know how to fix this?
2
132
Blocking local relay users
by
Rakkey » 16 Aug 2018, 16:53
Hi,
Currently we are having a bit of an issue, as a customer was spamming (stopped now), with a PHP script, which he ran with php through cronjob.
Type: LOCALRELAY, Local Account - pxhostin
Count: 101 emails relayed
Blocked: No
Sample of the first 10 emails:
2018-08-16 17:01:01 1fqJll-00FEHj-Fm <= pxhostin@ <hidden> U=pxhostin P=local S=458 T= Test for support@...
0
16
ConfigServer IP Addresses
Could someone please direct me to a list of ALL the IP addresses that ConfigServer Services uses?
I have 85.10.199.177 in my csf.allow and csf.ignore files so that CSF+LFD can download updates, but I had to add an empty csf.deny file and restrat scf+lfd in order to get the email from the registration for the HELPDESK.
The email came in on 85.13.219.102 .
I can add that IP explicitly too,...
0
24
cPanel login alerts (LF_CPANEL_ALERT)
by
philh » 14 Aug 2018, 12:06
When I log into any cPanel account from WHM, I get an alert, as expected from my settings. However, if I log directly into a cpanel account (using ), there is no email notification. Is this how it should work? The conf file says Send an email alert if anyone accesses WHM/cPanel... I read WHM/cPanel to mean access from either WHM or cPanel, or does it mean cPanel only when accessed via WHM?
I...
0
16
SSL Negotiation Error While Update
Hi,
I had been running configserver in an old machine using Centos 5.x
Recently I got the following error while attempting go update via /usr/bin/csf -u in cron task.
Oops: Unable to download: SSL negotiation failed:
The cron task had been working on well for many years. Not sure what changes should be done to avoid this error.
0
20
lfd pignore configuration
Hi,
I have emails like the following ones, I'd like to silence them, using the command line.
What should I set in pignore file?
Time: Sun Aug 12 01:10:28 2018 +0200
Account: netdata
Resource: Process Time
Exceeded: 1802 > 1800 (seconds)
Executable: /usr/bin/bash
Command Line: bash /usr/libexec/netdata/plugins.d/tc-qos-helper.sh 1
PID: 3669375 (Parent PID:3066427)
Killed: No...
0
21
LF_TRIGGER affect what?
by
lwt » 11 Aug 2018, 14:23
Hi,
I am new to CSF or rather new to Linux to say.
Can anyone provide me a link to a more layman explanation of what actually LF_TRIGGER does?
If you set LF_TRIGGER to “0”, the value of each trigger is the number of failures against that application that will trigger lfd to block the IP address. If you set LF_TRIGGER to a value greater than “0” then the application triggers are simply on...
0
22
Failed upgrade on WHM - can't start
by
dslee » 10 Aug 2018, 14:34
Hi all,
Long time user of CSF and first time posting...
CSF on my WHM server attempted an auto upgrade overnight and failed with the following entry near the end of the emailed log:
Error: Invalid TCP_IN port , at line 3026 Job for lfd.service failed because the control process exited with error code. See systemctl status lfd.service and journalctl -xe for details.
Now I can't start...
3
71
lfd block problem
by
given » 10 Aug 2018, 06:42
I got a problem that csf suddenly blocked a mass of IP addresses after the csf auto upgraded.. Can tell me how to solve the problem?
Photo:
1
78
Blocking china to access some ports but keep allowng to receive email from china
i have tried to set cc deny country port and cc deny pirt tcp in csf.
i want to block china from accessing my pop and smtp server for hacking it. But i want to allow email that is sent from china can arrive to my server because my customer has business with china company. How can do that? I put 22,25,110,465,993,995,143,587 in cc deny port tcp. Buat it makes email that is sent from china got...
1
107
Changed SSH Port
Hello, thanks for the great work you did to make all this effort on this awesome firewall.
Today i changed the default SSH port from 22 to 2022 on my vps, opened it in TCP_IN TCP_OUT but i saw in the CSF that it still says 22 as the SSH port. Is that a problem ?
Steps i took for the change:
1. Edited /etc/ssh/sshd_config and changed the port 22 to 2022 and deleted the #
2. Restarted SSHD...
2
130
csf on webmin and default css
by
ale-ab » 08 Aug 2018, 16:35
Hello,
i'm a few servers with webmin and when i install csf firewall and own module in some server i see a page with css of authentic theme , like this
in other server i see a page with default css of csf firewall (similar in cpanel) like this
how i change first view and use second view (default css firewall (similar in cpanel) also in webmin.
Thank you
Ale
2
35
CSF Firewall PagSeguro
I'm sorry for my english...
After a long time of searching and without any success, I come to the Manufacturer's Own Forum ... I installed CSF Firewall in my Ubuntu Machine ... Only it Blocks the PagSeguro API System, (CSF Do not Let Open the Return Page of the Site) Example: I try to make a Purchase in the Site ... When I finish the Purchase to be Redirected to the respective Site (PagSeguro) I...
0
79
2778 topics
Page 1 of 139
Forum permissions
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
