ConfigServer Community Forum

I'm having a bad time with CSF.

I've tried all profiles, i've turned off mod_security, i've duplicated settings from another working server with CSF all to no evail.

I've check logs and there is nothing i can find.

Basically when I enable CSF/LFD my sites run fine and then slow down and won't load javascript files and other files relating to wordpress or modx (modx specifically). There are...

Have a problem configuring CLUSTERING (csf: v9.28) with 'CentOs release 6.8'.

Have set the parameters 'CLUSTER_SENDTO, CLUSTER_RECVFROM, CLUSTER_POST, CLUSTER_KEY and CLUSTER_BLOCK'.

On machine 1 (CentOs release 7.3.1611) a test with the command 'csf --cping' give a valid output.
On machine 2 (CentOs release 6.8) same test gives the output 'Can't locate object method new via package Crypt::CBC...

Ok here it goes.

I have an issue with Passive FTP.

I entered the following in my CSF firewall: 30000:50000

I also changed my pure-ftp.conf file to 30000 50000

Restarted the FTP

Still have the issue. Not sure if there is something other to do. Never had this issue before with my other server.

Any help is appreciated.

Since the update to CSF 8.17, I have been receiving the following typical alert for every 100 or so messages sent by Mailman to legitimate lists:

Time: Tue Apr 5 17:15:20 2016 -0400
Type: LOCALHOSTRELAY, Local Account - ::1
Count: 109 emails relayed
Blocked: No

For a list of 600-700 members, I receive 6 alerts. Note the strange account name. 8.19 did not correct the problem and it never...

Hi there, I just rebooted my server and spent over an hour watching the iptables rules being loaded one by one. It seems as though there were many thousands of rules being set, but I cannot understand how. Once CSF had finished and I was able to interactively access the server, I checked csf.deny and there are only 218 lines in that file, which are all single IPs (not CIDRs). there are currently...

Hello
i found LF_HTACCESS block for login failure detection but for of Apache
what about same founction for tomcat web authentication (realm) ??

Thank you

And I am getting:

Job for lfd.service failed because a configured resource limit was exceeded. See systemctl status lfd.service and journalctl -xe for details.
● lfd.service - ConfigServer Firewall & Security - lfd
Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled)
Active: failed (Result: resources) since Fri 2016-12-02 14:19:54 EET; 4ms ago
Process: 86993...

Hey All,

I encountered a super weird issue today, and was not able to figure out the cause, or reproduce.

Out of the blue, my server started rejecting connections from anyone, anywhere. Meaning, all hosted sites were down, the server was not pingable, WHM was unreachable, etc..

My gut instinct was check the firewall and sure enough, after logging in via console and executing a csf -x the whole...

se

it looks like there is a new exploit affecting Cpanel servers
How can an IP gain access to Cpanel /whm without logging in

is there some setting in CSF that I can tweak to block this

Hello.
I have installed a firewall csf but check server security the message

csf running check
iptables is not configured. You need to start csf

System used:
OS CentOS 6.8
virtuozzo
DirectAdmin

Please help me

Hi,

I provisioned a new VPS a few days ago and they used a pretty old image as CSF is on version 6.36. When it looks to upgrade it cannot seemingly find the server for whatever reason. I tried running csf -u in the shell and get the same 'Oops' message.

I don't want to accidentally mess anything up so if you can let me know how to either manually upgrade or completely uninstall the software...

Hi,

We have a master server and many slave servers which together form a csf cluster. When we try to use the option cluster ping, we are not getting reply from few servers. Please see the details below.

csf --cping
---
Sent request to 213.xxxxx, no reply
Sent request to 213.xxxxxx, no reply
Sent request to 213.xxxxx, no reply
Sent request to 213.xxxxxxx, no reply
Sent request to 213.xxxxxxx, no...

Hi Guys,

I have stuck with 1 problem. LFD doesn't want to generate email reports about ssh/cpanel login attempts and etc.

maillog is empty on related emails from root@hostname

CentOS release 5.11 (Final)
WHM 11.46.1 (build 7)
csf v7.58
egrep '(LF_CPANEL_ALERT_USERS =|LF_CPANEL_ALERT =)' /etc/csf/csf.conf
LF_CPANEL_ALERT = 1
LF_CPANEL_ALERT_USERS = root

RESTRICT_SYSLOG = 0
LF_ALERT_TO =...

Hello guys,

I have CSF v.7.60 installed and up until recently when I manually put an entry in the Temporary Allow/Deny block using WHM everything worked as it supposed to.

I believe after the cPanel update -but I'm not certain- to 11.46.2 (build 4) Temp entries are not kept more than 12-24 hours. So if I choose to keep an IP say for 7 days, the next day this IP is removed even though I selected...

I flushed iptables with iptables --flush (don't do this if you don't know what it does!). Then I rebooted my system (Ubuntu 16.04). CSF started as expected, but I noticed the flushed /nonexistent firewall rules were still there after the reboot. I had to issue a csf -s in order to get my iptables rules reinstated. I was a little surprised by that, since I assumed that at boot, csf would start...

Hi,

I am using CSF on my cpanel server, i want to disable ICMP Timestamp Response as Trustwave is failing PCI DSS scan due to this, how do I achieve this via CSF, I disabled incoming ICMP but that has not solved this issue. Below is the description given by Trustwave about this:

---
The ICMP protocol is used to support many administrative and maintenance messages on an IP network (the most...

Just a note that I ran into a problem with certain cluster members were not responding. I double checked their configurations and everything looked good. Restarting LFD wouldn't fix anything. When I ran csf --cping from the master node two of them reported no reply even though when I looked at their logs you could see lfd : Cluster member (CA/Canada/ ) said PING!

It turns out that they were a...

I've been managing CSF as a plug-in in Cpanel WHM. If Cpanel expires, how to I continue to access the CSF Web Interface? Are there any changes I need to make to the config?

Hello,

I'm having a serious issue where each time I restart my server, the ports I added manually to CSF are forgotten... This always causes issues...

Any idea what's going on with this? Is there a workaround I can do in the meanwhile?

i use csf v7.07.
i got a lot of processes like these:
root 9164 0.0 0.0 101236 4084 ? Ss Aug01 0:00 sshd: root
sshd 9165 0.0 0.0 67992 1652 ? S Aug01 0:00 sshd: root
root 10412 0.0 0.0 101104 3796 ? Ss Aug02 0:00 sshd: unknown
sshd 10414 0.0 0.0 67992 1740 ? S Aug02 0:00 sshd: unknown
root 10439 0.0 0.0 101236 4088 ? Ss Aug03 0:00 sshd: root
sshd 10440 0.0 0.0 67992 1656 ? S Aug03 0:00...