Is it possible to block IPs from reaching any of the VEs inside an OpenVZ node?
We have CSF installed on the host node. Some of the VEs do not have CSF installed. We are wanting to block certain IPs from accessing those VEs. Blocking the IP on the hostnode doesn't seem to have any affect.
I suspect it's tied partly to the fact that:
/sbin/iptables -A INPUT -i venet0 -j ACCEPT
/sbin/iptables...
I have been running Plesk web hosting for years behind a firewall appliance. Before that we were rooted often enough. Now we've added cPanel and almost instantly 100/100 strong passwords are hacked. cPanel knows nothing :( We installed APF/BFD and they got right around it. We installed CSF and they got around it because we had not blocked SSH. We seem to think that they are getting in from...
Some time back our main server on stopped sending Server Check emails with the current CSF Status to me.
I used to get them once a week::Subject Server Check on
Our hosting support cannot get them resumed.
Setting the Generate and email this report to the email address (My Address) on the Check Server Security page makes no difference.
It runs csf v9.25.
Up until today I have been able to upload images or what have you in my wordpress blog with no troubles. Today after a recent update to csf I noticed that the only way I can upload is to disaable the firewall. Never had to do this before. What has changed in csf configuration that has caused this? Must be something you've done as I said no issues until today after update. Can't seem to find any...
I have 4 classifieds websites that are local in nature and I want to block access to all countries except one for all 4 websites. Is this possible with csf without affecting the rest of the server? Ideally, I would like to allow access from only a certain ip cidr ranges but not sure if that is possible with csf either. Any ideas or solutions greatly appreciated.
I have 3 servers with install csf and config Exim SMTP AUTH Restriction
two servers works normal, bus one server file exim.smtpauth lost configuration when use command csf -r .
# ll exim.smtpauth
-rw-r--r-- 1 root root 9524 Oct xx xx:xx exim.smtpauth
# csf -r
# ll exim.smtpauth
-rw-r--r-- 1 root root 132 Oct xx xx:xx exim.smtpauth
On the following:
Operating system CentOS Linux 7.2.1511
Webmin version 1.810
Virtualmin version 5.04
Theme version Authentic Theme 18.10
Now when I go to ConfigServer Security & Firewall section in Webmin. It starts to load the main CSF Plugin Page, but then instantly bumps be back to the main Webmin Dashboard.
Hello, guys i am trying to allow access to only one IP on a specific port to my server. After Googling i find something.
In csf.allow i have put this
tcp|in|d=5080|s=x.x.x.x.x
after doing this. i have reloaded csf using csf -r
then used a proxy and asked my few friends everyone is able to access what is the reason behind this ?
Some time back, someone shared a script which could allow Remote MySQL IP's through.
Here's the script:
mysql mysql -e select Host,User from user where Host!='localhost' group by Host; | awk {'print tcp:in:d=3306:s= $1 \t# $2'} | sed s/\%//g | egrep {1,3}\. {1,3}\. {1,3}\. {1,3} | grep -v 127.0.0.1 | sort | uniq
Running the script in SSH gets a list of IP's, and if I allow an IP manually...
Recently I had a major attempt on port 21 and I thought to change the FTP port for more security.
I use Pure FTP and I changed the port in the /etc/pure-ftpd.conf file from 21 to 10290 like this: Bind 10290
Also I allowed port 10290 in csf in both TCP_IN and TCP_OUT. Basically where port 21 was mentioned at the csf config, I changed it with port 10290 .
Tested on 3 servers. centos6 and centos7
if someone got banned for portscanning , his IP doesn't sent to csf.deny file. and of course you can't unblock it's IP or find it in /etc/csf/csf.deny , it just shows in /var/log/lfd that this IP is blocked.
However there's no way to unblock it by anyway because it doesn't in /etc/csf/csf.deny, and csf -tr doesn't work too.....and you have to...
After enabling it and trying to access SSH with a VPN ip, I still get the login screen (and can still login).
When I try to access webmin via port 10000 I am however denied.
So what is the issue here? Why is the webmin port correctly blocked, but the SSH port not?
I am using a custom SSH port, is that the issue?
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum