ConfigServer Community Forum

This has been going on since the 14.04 update. However, i thought it would be patched by now.
It loops the error until you disable the CDF and Lfd.
Any ideas would be appericated
CentOS 7.8

Startup Log Aug 13 11:56:43 ###OMITTED### systemd : Starting ConfigServer Firewall & Security - lfd...
Aug 13 11:56:44 ###OMITTED### lfd : syntax error at /usr/sbin/lfd line 7519, at EOF
Aug 13 11:56:44...

Hi all,
I just wondered can I configure things so I can run with smtp_block enabled but allow a specific I.p to bypass the block.

The system is Ubuntu 18.04 with Exim4

I have a bill manager running on another server ( Centos) with no smtp server, It's configured to use an account on the Ubuntu server to send emails. The account it uses is on the Ubuntu server and I've tried allowing the user...

Ubuntu 20.04.1 LTS

I'm not a new user for CSF and recently i installed this software in new Ubuntu 20.04.1 LTS device.
The installation process and testing worked fine. No issues appeared. After that changed mode from 1 to 0 in conf then got a one problem.

Fail to update ubuntu system. `sudo apt update` it shows unable to connect (using ubuntu regional) however web browsing etc worked fine....

Hi all,

I have some ASN that are thoroughly obnoxious and I want to block them.

I notice that CC_DENY can accept AS numbers in place of country ISO codes so I implemented what I thought would work and.....

It does not! LFD just triggered from one of those hosts.

Here is what I did:

# cat /etc/redhat-release
CentOS Linux release 7.8.2003 (Core)
# rpm -qa | grep ipset...

Good morning,

Before I write my own hook to integrate cPanel remote MySQL hosts into CSF, I'm asking if anyone else already did that.

So, when someone add MySQL remote host on cPanel, this IP should be added instantly into CSF configuration to allow 3306 on it.

Thanks in advance.

Hello,

im Using cPanel + Litessped + Modesecurity Rules ( Imunify360 LiteSpeed Rule Set )

ttps://files.imunify360.com/static/modsec/v2/meta_imunify360-full-litespeed.yaml

i enabled Modsec Trigger on CSF :

LF_MODSEC = 1
LF_MODSEC_PERM = 3600

Also i see Hits on :

Home »Security Center »ModSecurity™ Tools »Hits List :

2020-08-01 00:17:16 arakfelezisatis.com 95.188.147.134 WARNING 403...

Hello good afternoon, I open this topic because I am having blocks from my cPanel server to my AD through TCP port 389. In the CSF firewall I already added the IP of the AD server in a white list and also allowed TCP and UDP port 389 in the input and output, but even with those settings the connection blocks continue. I send the log that is generated:

Jul 31 11:40:01 cpanel kernel: Firewall:...

Hi

I am running csf on my centos 7.

I am looking to whitelist port range what is the possible way to do so as I am new with CSF.
I am running csf v14.04.

I have added one line to white list port in csf.allow but its not working for me which is as below

tcp|in|d=7770:7800|s=192.168.16.17/28

Thanks

I installed a new Centos 7 server, the same as my old server.
On my old server I could connect to FTP servers with PASV no problem.
But on my new server it blocks the connection.
SPI is on, Connection tracking is on.
Incoming FTP connections with PASV work fine (without the hole).
How do I get the outgoing ftp servers to work? (without whitelisting them)

thanks!

Hello guys,

I see some sites are hotlinking our images.

Is it possible to block specific hostnames/ domain names from accessing our server ?

Any guidance would be very much appreciated.

It seems that unless you put the following in ui.allow:

127.0.0.1 # localhost

... lfd won't allow browsers on localhost to connect (connection is reset). As localhost is automatically whitelisted in other places with CSF/LFD, surely it should be auto-whitelisted for the UI?

Hello,

ENV: Centos 8, Csf 14.04, iptables enabled and started as well as ICMP_IN = 0.

I have added manually in iptables ICMP INPUT and OUTPUT for ping to work.

I also have 192.168.0.0/24 in allow.

With this, ping from 192.168.0.2 ---> to 192.168.0.3 and vise versa works.

But csf -cp from 192.168.0.2 ---> to 192.168.0.3 and vise versa does not work.

Here, do not that ICMP_IN = 0. It -...

Auto update of csf today resulted in corrupted /usr/sbin/lfd file. There was an EOF at line 10229 after $ch .
I had to run curl -sL | perl to fix it.

Upgrading csf from v14.03 to 14.04...
Retrieving new csf package...
...5%
...10%
...15%
...20%
...25%
...30%
...35%
...40%
...45%
...50%
...55%
...60%
...65%
...70%
...75%
...80%
...85%
...90%
...95%

Unpacking new csf package...

gzip: stdin:...

Hello,

ENV: Centos 8, Csf 14.04, iptables enable.

I have tried to block a spammer, who installed a cron script to populate every ten and every eleven minutes in logfiles of my server with following:

FQDN/login?dst=http%3A%2F%2Fbucket-img.y5en.com%2Fmessage%5Ficon%5Ffriends.png
FQDN/login?dst=http%3A%2F%2Fbucket-img.y5en.com%2Fmessage%5Ficon%5Ffind.png

Instead of using modsecurity, I...

Hello,

In following message there is a bug:

*Error* IPSET:
CC: Repopulating ipset cc_6_ua with IP addresses from
IPSET: loading set new_6_ua with 0 entries
IPSET: switching set new_6_ua to cc_6_ua

Hi,

how can I stop firewall alert notifications on the system?

I am using a CSF firewall with Centos 7, due to security reasons I blocked SSH port access since I had KVM access.

now the issue is the KVM viewer becomes so messed up ... the alerts keep popping up even if I open nano or vi editors.

The ICMP settings are disabled via cPanel/WHM as well.

Image Reference

SMTP Server blocked by csf and throwing error

LOG: MAIN
cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -M 1jsyQF-0002B0-JY
delivering 1jsyQF-0002B0-JY
LOG: MAIN
Sender identification U=keralad1 D=keraladesk.com S=info@dummydomain.com
Connecting to how.lakemneadows.com :25 ... failed: Connection refused
LOG: MAIN
H=how.lakemneadows.com Connection refused
LOG: MAIN
==...

Does anyone know how I can add the users IP address to sualert.txt?
I've tried the following but it does not work

IP:

Since a few weeks the CSF Real time blocklists checker in WHM stopped working. The titles of the hourly checks that email me, they report this:

`RBL Check on server04.ourcompanydomain.com: failures`

Every single list is failing, and I have no idea where to start checking why.

The only clue I have and the only text that seems out of order is in the middle of the email report Senderbase:...

Hi,

I have just install CSF on Ubuntu, on a Digital Ocean droplet.
I don't have an email server installed, so I would like to send CSF/LFD emails via a 3rd party SMTP server.

How would I do this, without installing a mail server?
I have looked at the csf.conf and couldn't see away.

Thanks,
Gaz