ConfigServer Community Forum

A week ago I received an email saying: Time: Wed May 15 19:08:50 2024 -0400 File: /tmp/alfacgiapi/getheader.alfa Reason: Script, starts with #! Owner: fromhigher:fromhigher (1013:1014) Action: No action taken I went in and found that the site was hacked, deleted everything, restored and patched from...

I quite often receive cxswatch notifications such as this: cxswatch Scanning /home/-----------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php: '/home/--------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-...

I know I can do the auto-delete thing, however doing so only masks the problem that CSF is still sending stuff out when according to the settings it shouldn't be. I have been hesitant to do it this way as I am concerned that training gmail to auto-delete stuff from a domain might cause it to classif...

I'm having this same problem on another server as well, one that just was spun up a few days ago. On both systems I have this in the config: LF_PERMBLOCK = "1" LF_PERMBLOCK_INTERVAL = 86400 LF_PERMBLOCK_COUNT = 4 LF_PERMBLOCK_ALERT = "0" But even after restarting LFD and CSF I st...

I have the LF_PERMBLOCK_ALERT set to OFF and have saved and reloaded CSF. Still, even after turning it off I am getting dozens of PERMBLOCK alerts in my inbox every day like the one pasted below. Am I missing some other setting that I have to change to stop CSF from sending me all of these? Time: Th...

Any help at all on this would be greatly appreciated. I'm still getting them. Same path: Account: mailman Resource: Process Time Exceeded: 10010 > 10000 (seconds) Executable: /usr/bin/python2.7 Command Line: /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s

Via email I get the following notifications (hundreds a day): Time: Mon Mar 2 02:16:07 2020 +0000 Account: mailman Resource: Process Time Exceeded: 17249 > 10000 (seconds) Executable: /usr/bin/python2.7 Command Line: /usr/bin/python2 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner...

Finally got it figured out on my own. Posting this here in case someone else needs it. In the csf.allow file add the following line: tcp:in:d=3306:d=xx.xx.xx.xx where the xx is the IP of the remote SQL server. For more info look at this page where I found the answer at: https://www.crybit.com/enable...

I have a site on a WHM/CentOS dedicated server using CSF. This 144.x.x.x server has a client who has a remote database on a different server (37.x.x.x) and he needs to connect his script from the local server over to that 37.x server using a remote MySQL connection. Up until now all he gets when we ...

The cron jobs on all accounts other than root have stopped working on my VPS. The cpanel people say it is due to the change made to CSF back in February... I understand that this change would prevent the log being written (if I am understanding it correctly) but would this change also prevent other ...