Search found 1341 matches

by ForumAdmin
02 May 2022, 21:34
Forum: General Discussion (csf)
Topic: Stop Distributed attack emails
Replies: 6
Views: 924

Re: Stop Distributed attack emails

Those emails are controlled by LF_EMAIL_ALERT
by ForumAdmin
28 Apr 2022, 11:04
Forum: General Discussion (csf)
Topic: lfd on my.server.com: user@domain.com blocked for imapd access
Replies: 2
Views: 476

Re: lfd on my.server.com: user@domain.com blocked for imapd access

That is controlled by the Login Tracking options: # Block IMAP logins if greater than LT_IMAPD times per hour per account per IP # address (0=disabled) - not recommended for IMAP logins due to the ethos # within which IMAP works. If you want to use this, setting it quite high is # probably a good id...
by ForumAdmin
05 Jan 2022, 12:05
Forum: General Discussion (csf)
Topic: CSF not blocking failed IMAP and POP3 logins on Interworx (CSF 14.15)
Replies: 6
Views: 1364

Re: CSF not blocking failed IMAP and POP3 logins on Interworx (CSF 14.15)

It would help if you could provide an example log line that was not detected.
by ForumAdmin
22 Dec 2021, 18:32
Forum: General Discussion (csf)
Topic: here: [] in LFD Log
Replies: 2
Views: 655

Re: here: [] in LFD Log

It's some debug code that you can safely ignore. It will be resolved in the next release of csf.
by ForumAdmin
10 Dec 2021, 10:27
Forum: General Discussion (csf)
Topic: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15
Replies: 5
Views: 1026

Re: LF_SUDO_EMAIL_ALERT = "0" still sending emails on v14.15

csf.uidignore has nothing to do with the LF_SUDO_EMAIL_ALERT option. lfd cannot log if LF_SUDO_EMAIL_ALERT is disabled, which might suggest that you failed to restart lfd after changing it, or there's an issue with your /etc/csf/csf.conf file.
by ForumAdmin
10 Dec 2021, 10:21
Forum: General Discussion (csf)
Topic: UDPFLOOD_ALLOWUSER not being ignored
Replies: 3
Views: 656

Re: UDPFLOOD_ALLOWUSER not being ignored

You need to post the log lines from /var/log/messages or wherever the kernel log lines for the firewall are logged that are being detected by LFD. A sample of which will be provided in the emails from lfd regarding any report. You're also confusing UDP_FLOOD and UID Tracking which are different opti...
by ForumAdmin
10 Dec 2021, 10:18
Forum: General Discussion (csf)
Topic: Getting False Positive Blocks From an Unknown IP Range
Replies: 3
Views: 911

Re: Getting False Positive Blocks From an Unknown IP Range

That looks like a problem translating /proc/net/tcp6. It would help if you can post the following:

1. The OS and version
2. The kernel and version
3. The contents of /proc/net/tcp6
by ForumAdmin
04 Dec 2021, 10:44
Forum: Report Bugs (csf)
Topic: LF_SU_EMAIL_ALERT stopped working since update
Replies: 4
Views: 1234

Re: LF_SU_EMAIL_ALERT stopped working since update

We will have a fix for this in the next release of csf.
by ForumAdmin
11 Nov 2021, 12:30
Forum: Report Bugs (csf)
Topic: Geolocation (MaxMind) not working
Replies: 7
Views: 2201

Re: Geolocation (MaxMind) not working

We are unable to recreate the problems: [root@homer Geo]# ls -la total 373644 drw------- 2 root root 4096 Nov 11 12:28 . drw------- 10 root root 4096 Nov 11 12:29 .. -rw-r--r-- 1 root root 55 Nov 11 12:28 COPYRIGHT.txt -rw-r--r-- 1 root root 19576642 Nov 11 12:28 GeoLite2-ASN-Blocks-IPv4.csv -rw-r--...