Hello. I'm using webmin and centos 6.10
today found that csf redirecting me to linux firewall (nomatter what I click settings or allow ip's or other in csf) and I cant change settings, add ip's and etc.
What could happens with csf ?

Hello,

We're using CSF firewall on CentOS 6.10 server and isn't working as expected.

Here is the output of csftest:-
----------------
# /etc/csf/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...FAILED - Required for csf to function
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing...

I am referring from a topic that i could not solve at forum-level (i tried). [ ] :

on a directadmin-server with csf i experience that albeit csf.conf states:

TCP_IN = 20,21,25,30,53,80,110,123,143,443,465,587,953,993,995,1935,3000:3039,3478,3479,5001,5060:5099,5222,5269,5275,5349,7443,7070,7777,10000:20000,49160:49300

i find port 3306(TCP) accessible from outside unless mysqld is bound to...

Hello,

I need to ask for advice about a wierd constellation:

on a directadmin-server with csf i experience that albeit csf.conf states:

TCP_IN = 20,21,25,30,53,80,110,123,143,443,465,587,953,993,995,1935,3000:3039,3478,3479,5001,5060:5099,5222,5269,5275,5349,7443,7070,7777,10000:20000,49160:49300

i find port 3306(TCP) accessible from outside unless mysqld is bound to 127.0.0.1-interface...

Good Morning,

I installed CSF on a node which include a lot of VPSs, I'm using virtualizor and proxmox and I already allow all required ports and IPs, I even add 0.0.0.0/0 in the csf.allow but still VPSs IP got blocked once I started the CSF

I checked all the logs LFD, Audit and other logs to be sure that everything CSF is blocking is now enable such as ports and stuff like that.

and now I got...

Hi

I am a newbie with WHM and because of this I would like to verify my settings before making changes.

My goal is to restrict access to some essential ports (SSH, WHM login etc.) to just one country so that logins to these chosen ports is possible only from IP's from this chosen country but at the same time let HTTP and HTTPS traffic from anywhere and also make sure that WHM and csf updates...

Hi

Do I have a some way to see the IP address ranges that CSF downloads when I for example block traffic from some chosen country?

From where do CSF get these IP address ranges?

I am trying to setup OpenVPN with IPv6. This runs on a physical machine.

- eth0 has a /64 configured.
- tun0 has another /64 configured.

Both are part of the same /48.

- The physical machine is accessible over IPv6. It can also access the outside world.
- A VPN client receives an IPv6 address and can ping the physical machine.
- A VPN client cannot access anything else over IPv6.

csfpre.sh is...

Do you have a place where to put any question about Outgoing spam monitor?

I am trying to implement SYNPROXY for the http/https ports with csfpre.sh

iptables -t raw -I PREROUTING -p tcp -m tcp --syn --dport 80 -j CT --notrack
iptables -t raw -I PREROUTING -p tcp -m tcp --syn --dport 443 -j CT --notrack
iptables -t filter -I INPUT -p tcp -m tcp --dport 80 -m state --state INVALID,UNTRACKED -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460
iptables -t filter -I...

Hi,

I put the IP 1.46.135.207 into deny list. However, this IP can still access my Wordpress site of the server.

How can this possibly occur?

Are there any solutions to block it?

regards,
Sounay

1st, Thanks for great product.

Is there anyway to include faulting account/email name in firewall deny ip list?

hellp,

csf have a big number of functions

but i need only the ftp pasv helper

do you know any way to i use only the script to ftp pasv helper ?

thanks,
rodrigo

Hello guys,

I need to allow all IP's address for specific country. Meaning that it wouldn't block any ip's associated with the country even failed logins and etc.

I tried CC_allow on csf but it's not working. some ip's are still blocking,

Any suggestions guys. please help me to figure out, Thank you.

Kind Regards,

Hi,

I think CSF is not the culprit but Cpanel technicians say so, so I am trying to shed any light on this strange issue.

A customer is not configuring properly her email account. I am still trying to understand what she is doing wrong, because I can configure myself her email account in my laptop without no issues.

Since she is doing something wrong, CSF reports login errors and tries to...

View iptables log option not working on virtualmin , this is the button that lets you View the last 100 iptables log lines via the web. I'm running Ubuntu Linux 16.04.5

I have similar setup using Webmin on Ubuntu Linux 16.04.4 it works fine for that server, just not this one (running virtualmin) .
Tried upgrading to csf 12.09 from a new install of 12.08

I tried apt-get install...

I would love to be able to use an allow list to retrieve the CloudFlare IP addresses regularly at these URLs, then apply my own advanced allowed rules to these IP addresses.

Similar to the feature of the Block Lists text file, where one can configure a URL to retrieve IP addresses from to be downloaded regularly and blocked in the firewall, is there currently a feature for an allow list? If...

Hello!, i've installed re captcha in messenger so the users can unblock the ip by themself , but i have the problem that the only domain registred on recaptcha is the server name , so if a user gets blocked they receive this error on the captcha field ERROR for site owner: Invalid domain for site key .

How could i redirect the URL on the messenger once a user get block ? i mean, from -> ?

I've...

Hello

The delete CloudFlare command is returning the failure
both at the interface and also at the command line.

CloudFlare Delete xxx.104.28.197 for user(s) SRV12:

Message:
csf - CloudFlare: id failed: 400 Bad Request (SRV12)

- Command line
# csf --cloudflare del xxx.104.28.197 SRV12
csf - CloudFlare: id failed: 400 Bad Request (SRV12)

Regards.

Jean

Whats the proper configuration when using postfix on a server instead of sendmail when it comes to notifications? Seems it wants a sendmail binary path.