We've been informed that this is an OVH server. We have had several reports in the last few days of customers and csf users with OVH servers unable to connect. One csf user reported that he discovered it was OVH's permanent mitigation feature. Since we are not familiar with this or how it is configured, I'm afraid we can't really help, and can only suggest that you follow up with OVH.
CSF/LFD updated automatically on my Debian 8.0 Jessie servers last night and now I am unable to start LFD and CSF is no longer working as well (iptables shows no rules anymore, tried csf -r ). The CSF/LFD Update was from 7.66 (which worked great!) to 7.67. Here is the error that I received when the update was running:
Restarting csf and lfd...
Flushing chain `INPUT'
Flushing chain...
I've discovered that some email notifications fail on Plesk servers:
e.g.
When running the command csf --logrun the email is never sent out. LFD reports that the email was sent successfully (with debug on) but I see this in the mail logs:
Running Centos 7.1 on my VPS with firewalld disabled and iptables installed. CSF has been working without incident for 5 months until today when an update was available today which I installed.
When trying to restart csf/lfd it freezes at the line below. Although CSF states it is running it is not effective after several tests I did.
Unsure when it exactly started but we have disabled the login failure email alerts as such:
LF_EMAIL_ALERT = 0
However, we since started receiving login failure alerts for various services (FTPD, SMTP, etc). Again, not sure when it started up again, though believe it was within the last month or so.
I am getting the following error, in CSF, under WHM:
Unable to connect to download configserver com, retry in 135 seconds. An Upgrade button will appear here if new version is detected
I have never had an issue, with CSF, until today. I checked my server and can ping download configserver com. There doesn't seem to be any issues with my server (no DNS or connectivity issues found). Could my IP...
We have a couple of servers being regularly attached by a single Russian IP address - I've added it to the block list but 24 hours later it's removed (presumably by the 100 IP limit?) - is there a way to permanently permanently block an IP address?
Allowed users include the user that runs the PHP script.
Using WHMCS, I set up amazon SES for sending emails over port 587.
When I send an email, the first email goes through but after that, every other email times out. If I restart CSF, I can get 1 email through again, but then the rest time out.
I just wonder if there is a way to ensure that csf is enabled at server startup. I am asking this because I noticed today that when my server, due to a scheduled restart, was restarted, lfd did not start and it remained so until several hours later when I came to knwo about the problem after I checked my mails and had to restart csf manually.
When I visit my website from my cellphone through my routers wifi I can access my site without a problem.
However, when I switch off the wifi on my phone and access my site from the phone I can not access, csf blocks me. After doing a lfd and csf restart I can access without a problem.
When I switch wifi back on I can continue to browse my site. I switch wifi off again and same problem...
I am getting the following email many times since a blocked hacking attempt by almost the same IP. What is the meaning of this message ? How to ride of the message ?
202.0.0.0/8 is blocked by CSF.
Sample of port hits:
Apr 16 20:08:03 server kernel: Firewall: *UDP_OUT Blocked* IN=
OUT=venet0 SRC=xxx.xx.xxx.xxx DST=202.137.3.120 LEN=73 TOS=0x00 PREC=0x00 TTL=64
ID=51303 PROTO=UDP...
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum