ConfigServer Community Forum

Hello,

Anyone can help me to turn off LFD alerts for ossecr service?

Screenshot;

I am getting a lot of emails from the service. I want to turn it off. I have turned off other LFD alerts but I can't turn off for the service I've specified.

Regards,
Khalequzzaman

Hello!
I have server Cpanel Cloudlinux+CSF>
I need make redirect port 4554 on port MySQL 3306.
I added on csf.redirect
But doesn't work , mysql not accept connect

Hello buddies , from somedays I am facing connection was reset by peer issue in my dedicated server.
The Following are installed in my server :
CPanel
CloudLinux
LiteSpeed
ConfigServer Firewall
Imunify360

I asked my friend he said that someone doing Ddos on your server.

sir I checked my IP on check-host.net , and I patched a issue that when UDP Ports showing connection refused then HTTP shows...

Hi,

-I did a simple installation in my server, I installed only: CentOS 8 + Postfix + Mailx + CSF
-I configured in file /etc/csf/csf.conf this data: LF_SSH_EMAIL_ALERT= 1 , LF_SU_EMAIL_ALERT= 1 , LF_SUDO_EMAIL_ALERT= 1 , LF_ALERT_TO= myemail@email.com
-I enabled only 2 ports: SSH port, and port 25 for emails
-I can send emails with command mail and work correctly.
-I not did nothing more for...

Hello,

I was wondering if anybody has any insight into this issue we are seeing. We have centos6 and csf with cpanel integration installed. Sometimes a users IP will be blocked, and after being removed, the hostname will still remain blocked in iptables.

After trying to remove the block through CSF it's saying it doesnt exist:

Unblock 184.153.XXX.XX, trying permanent blocks...

csf:...

Hello

Just i make a fresh installation on dedicated server with centos7 and cpanel.
When reboot server look ofline i believe this happening After installation of csf.
Now i have access only from rescue mode.
In past i didnt had any problem with csf and cpanel (centos 6 + cpanel)

Steps to reproduce:

1.I make fresh installation again.
2.I try to set csf on test mode to disable it.
3.I search on...

hello
im try to open / block port by country with this settings

all country:
TCP_IN = 20,25,53,80,443,465,587,993,995,1167,49152:65534,2080,2443,49152:65534

only from IT
CC_ALLOW_PORTS = IT
CC_ALLOW_PORTS_TCP = 21,110,143,2077,2078,2082,2083,2086,2087,2095,2096

deny all CHINA
CC_DENY = CN

deny BR,VN,TH
CC_DENY_PORTS = BR,VN,TH
CC_DENY_PORTS_TCP = 993,995,465,587

seem all works great...

Hello,

I am having issues with CSF not loading iptables rules on CentOS 8 on reboot. I have to run csf -r to apply the rules after reboot. How can I fix this?

Thanks,

# iptables -n -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
# Warning:...

Hi

csf.deny lists the IPs, and the protocol used for the IP blacklist. This is fine.
However, and when running shared servers, it would be really helpful if we could know what email address is being used when it gets blocked.

One of our clients has 30+ email accounts, and supposedly ONE user is constantly get blocked because of wrong SMTP credentials, this is what I see in the logs.

Is there a...

Hello

I've installed Messenger v3 on my DA servers with CL7 and CL8, it works as on the cpanel server but if I block my own IP and access a site ober port 443 the page loads, if I access it over port 80 I get the message from the Messenger.

I have compared the configs of CP with DA and found out that the file /var/lib/csf/csf.conf is not filled with the vhosts.

I changed MESSENGERV3HTTPS_CONF...

I've just noticed the new Docker options in CSF under Docker Settings , if we enable these do we no longer need to add the following to /etc/csf/csfpre.sh ?

#!/bin/bash
iptables -t nat -N DOCKER
iptables -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
iptables -t nat -A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
iptables -t nat -A POSTROUTING -s 172.17.0.0/16 !...

I'm having problems with a Docker container on my server which loses connection to the internet intermittently (it seems to be ok for a day to a few days, then loses connection to the internet). I've posted an issue with Docker, and they think it might be CSF:

The problem is most likely caused by your custom firewall which runs a script periodically and breaks the firewall. Please check if...

I'm setting up a new server on Debian 10 ready for transfer and noticed in the Webmin Plugin the 'Server Information' Panel is no longer there and most importantly the 'Check Server Security'

Does anyone know where/why this has gone? In the past it has been essential in setting up CSF and I'm a bit lost without it.

I think I'll try exporting and importing the old module in the meantime, however...

Anyone recommend which plugins/settings to use in combination with CSF for protecting Wordpress sites. It seems many of the security plugins are going to be overlapping with CSF functionality.

Hi,
I restart CSF + LFD and finally show:

● lfd.service - ConfigServer Firewall & Security - lfd
Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled)
Active: active (running) since Sat 2020-05-23 15:04:32 +0430; 4ms ago
Process: 29497 ExecStart=/usr/sbin/lfd (code=exited, status=0/SUCCESS)
Main PID: 29510 (lfd - starting)
CGroup:...

No response from subprocess (/usr/local/cpanel/whostmgr/docroot/cgi/configserver/cmm.cgi): The subprocess reported error number 72,057,594,037,927,935 when it ended. The process dumped a core file.

Getting this all the time. I have reinstalled CSF but it still persists!

Hello ConfigServer Community, Longtime lurker, first time poster.

We use CSF as our go-to for a bunch of cPanel servers, and for a while now we've been tightening everything up by controlling them with Ansible. The general idea is that we have a CSF config template, apply it to a server (so that if policies change, all servers are updated and CSF is ensured to be running) and away we go.

I'm...

I'm getting these suspicious process warnings:

Executable:

/home/virtfs/elemcms/opt/cpanel/ea-php73/root/usr/bin/php

Command Line (often faked in exploits):

/opt/cpanel/ea-php73/root/usr/bin/php -f cron.php

I'm not a REGEX expert and the documentation on all the different configs in the Pignore file is a bit thin.

My PHP version may change in the future so I just want to ignore execution of...

The title says it all i think.

When i want to unban an IP in the temp list i need it to be unbanned when working in a clustered csf.

am i missing a setting or is it a bug?

Is there a simple way to open all outbound UDP ports on a device only for destinations within the LAN? I know I could do it manually with iptables:
# iptables -I OUTPUT -p udp -d 192.168.0.0/24 -j ACCEPT
But is there a standard way to do this within CSF configuration?