ConfigServer Community Forum

I'm new to CSF, loving it so far, thank for a great product.

I noticed today that there's a 404 for the Emerging Threats - Russian Business Networks List link
.../blockrules/rbn-ips.txt

I've changed the link to
.../fwrules/emerging-Block-IPs.txt

Is this acceptable or is there a better method?

Thanks

I must be doing something wrong, because I cannot seem to get csf.fignore to work. I am trying to ignore the following files/folders, but they are still being logged by LF_DIRWATCH_FILE and they continue to trigger warning emails. Here is what I have in csf.fignore:

/home/username/public_html/cgi-bin/script/admin/data/text_dump\.txt
/home/username/public_html/cgi-bin/script/admin/backup/*...

After I upgrade to 7.1 I start received this message:
Error: FASTTART: iptables-restore: line 68174 failed, at line 3759

After start using the FASTSTART to use the CC_DENY and csf broken.

On the first install and configuration work normal, but on next day the csf crash and I need to disable the FASTSTART to work...

See the error:

csf: FASTSTART loading DROP no logging (IPv4)
LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* '
LOG tcp...

Hi,

How I can config CSF to
send email when CSF is stopped, dissabled, or restarted ?

Thanks

Hello,

after the last update we have the following error.

Error: FASTTART: ip6tables-restore: line 14 failed, at line 3787

and we cannot start lfd
csf is installed in a openvz ct
here the loaded modules

ip6t_REJECT 4711 0
ip6table_mangle 3669 0
ip6table_filter 3033 0
ip6_tables 19714 2 ip6table_mangle,ip6table_filter
ipt_REDIRECT 1888 0
iptable_nat 6302 0
nf_nat 23213 4...

Overnight, I have an error now. Everything worked before ok.

Please help:

csf: FASTSTART loading CC_ALLOW_PORTS (IPv4)
Error: FASTTART: iptables-restore: line 25716 failed, at line 3759

Any ideas what changed that caused this?

Hi

I got today after upgrading to 7.0.1
Error: FASTTART: ip6tables-restore v1.4.7: invalid portrange (min > max), at line 3787 in /usr/sbin/csf

I have disabled faststart and now it is working again.

Is it a bug?

Sorry its still broken

OVH Box.

Snip...
csf: FASTSTART loading UDP_IN (IPv4)
csf: FASTSTART loading UDP6_IN (IPv6)
csf: FASTSTART loading UDP_OUT (IPv4)
Error: FASTTART: iptables-restore v1.4.7: invalid port/service `90000' specified, at line 3759
root@srv # rm /etc/csf/csf.error
rm: remove regular file `/etc/csf/csf.error'? y
root@srv # csf -u
csf is already at the latest version: v7.01...

Hi, just for (my) info...
the change.log (for 7.00) says Ensure GeoIPCountryWhois.csv is removed before processing a new d/b download

If i do this (delete/remove it) csf hangs in a loop (it downloads the GeoIPContryWhois.zip ) and report this May 5 18:19:51 bf2-gs lfd : CC: Retrieving GeoLite CSV Country database
May 5 18:19:54 bf2-gs lfd : CC Error: GeoIPCountryWhois.csv empty or missing
May...

After a update i get this error of CSF:

Error: FASTTART: ip6tables-restore v1.4.7: invalid port/service `465993' specified, at line 3787 in /usr/sbin/csf

This was the update on Centos:
================================================================================
Package Arch Version Repository Size
================================================================================
Updating:...

After the automatic upgrade to version 7.01 csf has stopped working.
I have avps with CENTOS 5.10 i686 virtuozzo.

if I try to restart csf + lfd I get this error
Restarting bandmin acctboth chains for cPanel
iptables: Unknown error 4294967295
iptables: Unknown error 4294967295
iptables: Unknown error 4294967295
Error: Error processing command for line (6 times): , at line 778

no problem with the...

Hi,

I recently installed CSF on two servers, one is a Debian Wheezy (7.0) and the other Ubuntu Precise (12.04). I noticed on the Debian server that I have two files ( iptables_log and lfdmain ) in the /etc/csf/stats/ folder but these files are not present on the Ubuntu server. I did some further digging and I noticed that on the Debian server I have a /var/log/messages file but on the Ubuntu...

i woke up with following email:

The following list of files have FAILED the md5sum comparison test. This means that the file has been changed in some way. This could be a result of an OS update or application upgrade. If the change is unexpected it should be investigated:

/usr/bin/gss-client: FAILED
/usr/bin/sclient: FAILED
/usr/bin/sim_client: FAILED
/usr/bin/uuclient: FAILED...

Hello.

I am using ConfigServer Security & Firewall and I am trying to configure sending mail and security issues.

When sending mail using non-ssl my sending client IPs end-up blacklisted at my ConfigServer Security & Firewall .
It happens every time their internet provider changes their IP address.

Is there a way to exclude a domain from blacklisting at my ConfigServer Security & Firewall ?
I...

Hey there loop here...
again reporting something that i am sure it was working before.

Smtp ports this time :)

i am having the same problem with 465 and 587
both are not working for IP's that are not whitelisted.

As soon as i turn it off it works too.
ports are already included in IPv4 Port Settings/
TCP_IN
TCP_OUT
but still no one can not connect to those ports.

And again i am sure it worked...

Hello,

First, I use csf daily, both on my personal servers and at work with a mid-sized VPS hosting company. I appreciate that it is provided free to the community. It makes my life much easier.

I've noticed a problem with the recent update to 6.48. It does not seem to have affected the vast majority of servers where I work with CSF, but it's affected both of my personal servers, and I've...

Hello CS Team,

I've activated a new server yesterday and installed with success the CSF yesterday.

Today i was trying to install the CMQ, CMM etc.. however when i try wget to the configserver it does not connect to the server

--2014-04-30 12:30:43-- configserveraddress/free/cme.tgz
Resolving configserveraddress... 85.13.195.235
Connecting to configserveraddress|85.13.195.235|:80...

Tested...

hi all -

i am attempting to use Node.js for the first time. when i try to run the script, it triggers this firewall blockage:

Apr 29 12:21:41 edwardsmarkf kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=52:54:00:63:76:ee:00:03:fe:a0:b8:00:08:00
SRC=54.219.207.198
DST=199.231.184.26
LEN=52
blah blah blah
DF PROTO=TCP
SPT=2460
DPT= 8080
WINDOW=8192
RES=0x00
SYN URGP=0

it does not...

Hello

An ip is blocked due to pop3 login failed

Is it possible to find it was related to which email account ? (We know the domain name of the account, we need to know about account name)

Regards