Search found 4 matches

by dascos
18 Mar 2022, 08:00
Forum: Suggestions (csf)
Topic: OpenWrt module
Replies: 1
Views: 1565

Re: OpenWrt module

Well, I'm beginning to test on OpenWrt. First of all we have to install some packages, at least for the csftest.pl. Perl, Perl-baseipc, Iptables-legacy, iptables-mod-conntrack-extra, iptables-mod-extra, iptables-mod-filter, kmod-ipt-nat Then we have to make a symlink ln -s /usr/sbin/iptables /sbin/i...
by dascos
12 Mar 2022, 10:46
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 93
Views: 2017461

Re: Custom REGEX rules for CSF.

Hum...I'm try to make a better rule for Apache404 but no luck... I'm trying this if (($config{LF_APACHE_404}) and ($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /^(\S+).*(?:GET|HEAD|PUT).*HTTP.*404.*$/)) { $ip = $1; $ipblock = $ip; if ($config{LF_NETBLOCK_CLASS} eq "C") { if ($ip =~ /^(\d...
by dascos
11 Mar 2022, 15:03
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 93
Views: 2017461

Re: Custom REGEX rules for CSF.

An extremely symple rule for catching 404 (or wathever you like in Apache). Used cause the "normal" access_log don't run, for me, and dunno why. if (($config{LF_APACHE_404}) and ($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /^(\S+)\s+\S+\s+\[\S+\s+\S+\]\s+\S+\s+\S+.*HTTP.*404.*$/)){ retu...
by dascos
04 Mar 2022, 13:31
Forum: Suggestions (csf)
Topic: OpenWrt module
Replies: 1
Views: 1565

OpenWrt module

Hi all, I use Csf in all my production and testing servers (mostly Debian and Debian like) and never got a single problem....but...I also use a lot of OpenWrt routers and I think it would be a lot better to install a Csf on them, to centralize firewalling and not having Dmz or similar on the routers...