ConfigServer Community Forum

Can someone tell me why I'm getting hundreds of these emails below weekly and how to prevent it from happening again please?
I just blocked IP 50.22.179.3 but not sure if this is the solution. Thank you very much

Time: Wed Dec 11 05:17:24 2013 -0500
UID: 619 (ramyhids)
Hits: 11

Sample of port hits:
Dec 11 05:16:53 ns1 kernel: Firewall: *TCP_OUT Blocked* IN= OUT=venet0 SRC=MYVPSIP...

Hi,

I recently put up a new DNS server using 'bind9' and installed CSF.

I prefer to filter outgoing traffic, as much as possible, as well as incoming.

In the past, I allowed port 53 TCP and UDP in both incoming and outgoing directions with TCP_IN, TCP_OUT, UDP_IN and UDP_OUT.

However, apparently, by default and for security reasons, Bind9 uses random source ports for outside lookups. This...

Hello,

I have setup a new server today, and the RBL Check tools timeout on every RBL. I use this tools on other server and works well...but I have no clue why the timeout occur on RBL check on this server...

Screenshot:

Server is running centOS 7.x, lastest DirectAdmin and CSF version.

Sorry for my bad english, it's not my primary language....

Regards,

Hi,

I'm setting up a new server and although CSF installation seems to complete successfully, the CSF is not showing up in WHM > Plugins.

Any idea please?

I have been Googling this for awhile now, basically most of my website are UK specific so I always used the option to block Russa, China, Maxico etc using CSF but then I took on a client who has international visitors so I had to disable the country blocking I had setup.

Is there a way to turn the firewall off for just one specific domain, I can then go back to blocking all the countries that...

Hi

I posted another thread about problems running csf under centos7
But I didnt ask about firewalld

at the moment I disabled it and installed iptables/ip6tables -services

since firewalld seems to be the centos way now, are there any docs for how csf runs under centos7?

regards

l.

Hi

I just tried csf on a new centos 7.2 box at ovh
os is updated
kernel is 3.14.32

got this errors:

csf -r
*WARNING* URLGET set to use LWP but perl module is not installed, reverting to HTTP::Tiny
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `PREROUTING'
Flushing chain `INPUT'
Flushing chain `OUTPUT'
Flushing chain `POSTROUTING'
Flushing chain...

Hello,

I'm real new to owning a domain and a website. I use GoDaddy for hosting my domain in a Virtual Private Server and for domain name registration. They provide me with WHM / cPanel. I've installed CSF because I've been getting hammered by SSH brute-force type attacks daily.

I run Check Server Security and there was a lot wrong with my server. One of the suggestions says I should turn off...

Hello, last night I installed CSF and suddenly today I could not access via Plesk.
By accessing via SSH2 could put my ip in whitelist.
I wanted to ask that I enter to disable this rule please.
But if you work by blocking countries like China, Russia where they always attack me.
Thank you very much.

Hi, I've just had to change my nameserver IP addresses, my host done this for me (my hosting is colocated) and then sent me a message saying that when CSF is enabled CSF blocks DNS requests.

With CSF enabled the DNS servers do not respond
With CSF disabled the DNS servers do respond

Any help resolving this issue will be greatly appreciated.

Pete

Hi I hope someone can please help.

I have a server that I use externally for backup and cloud storage, however locally for convenience I'd like to allow samba shares.

I don't need these externally, just for my local network. Currently CSF+LFD just blocks Samba completely so I have to temorarily disable the firewall to use it. Does anybody please know how to just allow samba internally and keep...

It seems in my testing that the new ASN stuff in CSF 8.12 isn't working properly.

Eg: Added ASN AS2635 to CC_DENY. Then restart CSF and LFD. From LFD.log:

Jan 20 03:14:17 plesk125 lfd : CC: Extracting zone from GeoLite CSV Country/ASN database for
Jan 20 03:14:17 plesk125 lfd : CC: Repopulating ipset cc_as2635 with IP addresses from
Jan 20 03:14:17 plesk125 lfd : IPSET: loading set...

Dear Support,

We have csf installed, but I found the recent automatic update did not trigger the csfpre.sh after updating to v8.12 (generic) on multiple servers , losing all custom rules in the script. I have to manually restart csf again using csf -r to reload csfpre.sh. This is the second time we notice such behavior (the last time is v8.10->8.11).

Please note that this does not happen in...

Hi,

On the server panel it says version 8.12 available, while the latest based on the Changelog is 8.09?

What is that?

Weird thing just started happening this morning. Running WHM 54.0 build 1 and CSF 8.11.

Some users reported that they could not receive mail.

I had them test, and sending was fine, but not receiving, with various messages such as not being able to reach the server, and server response cannot POP.
Nothing in the logs, not lfd messages that they have been blocked, they just couldn't reach the...

Hello,

What means bruteforcelogin ?
The IP has called many Logins on Wordpress, Webmin, Plesk or other CMS/Controllpanels.
The Script use in the most cases Firefox19, BingBot and GoogleBot as UserAgent (grep for eval( or eval(base64_decode( in the Webspace) and often the name was mod_system.php

How prevent/block outgoing brute-force-attack (from our server to other destination server) by csf?...

Hi,

I'm doing some customize to iptables using limit burst. But when restart csf in cpanel, those customs rule gone.

I restart csf from cpanel because i set connection limit on port 80. We have several dos attack a few days ago on our client server. Please advice.

Thanks.

Hello All,

I have just completed my second installation of csf and this time I have a problem; The installation looks like it went ok however the /etc/init.d csf/lfd start/stop scripts are not present, any (constructive) suggestions please?
Installation log below...

root@srv:~/csf/csf# sh install.sh

Selecting installer...

Running csf generic installer

Installing generic csf and lfd

Check...

Hi,

I'm trying to allow all udp (multicast only) packets through the firewall. I wrote the following into /etc/csf/csfpost.sh:

iptables -A ALLOWIN ! -i lo -m pkttype --pkt-type multicast -p udp -j ACCEPT
iptables -A ALLOWIN ! -i lo -m pkttype --pkt-type multicast -p udplite -j ACCEPT
iptables -A ALLOWOUT ! -o lo -m pkttype --pkt-type multicast -p udp -j ACCEPT
iptables -A ALLOWOUT ! -o lo -m...

Hi,
i have installed the CSF in Webuzo panel.. as this panel don't have actually an antispam sistem I'M having throuble with e-mail SPAM.

Can you help me, can i configure SPAMHAUS or other suggested settings for protect me from E-MAIL SPAM?

Thanks.