Search found 958 matches

by Sergio
31 Jan 2023, 13:53
Forum: General Discussion (csf)
Topic: Port Scan
Replies: 1
Views: 84

Re: Port Scan

Do you trust IP: 195.38.120.XXX? Do you have port 443 opened in your FireWall? Does your server has a valid SSL for HTTPS? That IP is trying to connect to your HTTPS but your firewall is blocking it. For what it shows, there are so many attempts on a very short time period, it could be considered as...
by Sergio
31 Jan 2023, 13:42
Forum: General Discussion (csf)
Topic: lfd on server.xxxxxxxxx.com: Suspicious process running under user xxxxxxx
Replies: 1
Views: 63

Re: lfd on server.xxxxxxxxx.com: Suspicious process running under user xxxxxxx

Yes, add:

Code: Select all

exe:/opt/cpanel/ea-php73/root/usr/bin/php-cgi
to csf.pignore

Sergio
by Sergio
25 Jan 2023, 03:38
Forum: General Discussion (csf)
Topic: While CSF is active, it also blocks the IP of normal users.
Replies: 1
Views: 48

Re: While CSF is active, it also blocks the IP of normal users.

@xratuks,
please post a log line of the block, that will help to give you some advice.

Sergio
by Sergio
18 Jan 2023, 15:28
Forum: General Discussion (csf)
Topic: filter with postfix
Replies: 1
Views: 66

Re: filter with postfix

Please paste a LOG line from CUSTOM2_LOG to test the rule that you are showing.

Sergio
by Sergio
10 Jan 2023, 12:47
Forum: MailScanner Front-End
Topic: MAILCONTROL user button for black/whitelist ip/domain.
Replies: 2
Views: 127

Re: MAILCONTROL user button for black/whitelist ip/domain.

Thank you, Sarah. About the end-user MailControl features I mentioned, that will help the end-user with one click to white/blacklist on their own cPanel; similar to what we do in the main MailControl. I think it is very useful for the end user to white/blacklist from there instead of copying the inf...
by Sergio
03 Jan 2023, 17:14
Forum: MailScanner Front-End
Topic: MAILCONTROL user button for black/whitelist ip/domain.
Replies: 2
Views: 127

MAILCONTROL user button for black/whitelist ip/domain.

Hi Sarah and Jonathan, Happy New Year 2023!! Wishing both of you and your families a great 2023. In MAILCONTROL, Could it be possible to include a button to add an email address/domain to the Email black/whitelist settings of the user? Could it be possible to add the IP column? Also, it will be grea...
by Sergio
02 Jan 2023, 23:58
Forum: General Discussion (cxs)
Topic: Question regarding suspicious PHP
Replies: 2
Views: 119

Re: Question regarding suspicious PHP

First, check permissions on your files and folders, change any folder with "777" access to 755. Also, check all WP files and they should be 644. For me the only file that should have "444" is the wp_config file as in there are sensitive info. If you have folders with "777&qu...
by Sergio
02 Jan 2023, 22:54
Forum: General Discussion (csf)
Topic: Invalid IP in CC_RU ipset
Replies: 1
Views: 108

Re: Invalid IP in CC_RU ipset

I assume, the IP is blocked in CSF, so, please copy here line 2174 from csf.deny to have a look at what you have in that line.
by Sergio
14 Dec 2022, 16:57
Forum: General Discussion (csf)
Topic: How can I block this kind of exim spam attck?
Replies: 17
Views: 898

Re: How can I block this kind of exim spam attck?

You can do a test of the rule and your log line in regex101.com
by Sergio
08 Dec 2022, 04:03
Forum: Suggestions (csf)
Topic: Block Single IP requesting multiple domains
Replies: 1
Views: 120

Re: Block Single IP requesting multiple domains

If you have a LOG line about this attack, it will be great to see it, that will give an idea on what you can use to stop it.

Sergio