Search found 4 matches

by KyleT
24 Feb 2016, 07:04
Forum: General Discussion (csf)
Topic: Allowing certain users access to an interface
Replies: 1
Views: 2235

Re: Allowing certain users access to an interface

Okay I've semi-worked out how to do this; I have added the following to the csfpre.sh file: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP However, we have rules in the csf.allow file that allow access to certain ports on the eth1 subnet, which seem to...
by KyleT
27 Jan 2016, 08:05
Forum: General Discussion (csf)
Topic: Allowing certain users access to an interface
Replies: 1
Views: 2235

Allowing certain users access to an interface

Hi there, Firstly, to explain my current set up, I have a home server with two interfaces, eth0 (public interface) and eth1 (private interface). eth1 is used for my internal network and backups. I would like to block *all* users from doing anything on eth1, and only allow certain system users, such ...
by KyleT
02 Jan 2015, 05:47
Forum: General Discussion (csf)
Topic: Preventing CSF from killing a certain process
Replies: 3
Views: 5686

Re: Preventing CSF from killing a certain process

Thanks but are you sure it's not CSF (or LFD)? Based on this log entry, and the fact it says "suspicious process", it seems like it's definitely being killed: Dec 12 12:21:19 hostname lfd[664824]: *Suspicious Process* PID:652751 PPID:652750 User:ataorgau Uptime:95 secs EXE:/usr/bin/ssh CMD...
by KyleT
31 Dec 2014, 02:32
Forum: General Discussion (csf)
Topic: Preventing CSF from killing a certain process
Replies: 3
Views: 5686

Preventing CSF from killing a certain process

Hi there, We are trying to SCP a large file from one of our servers, however CSF appears to be killing the SCP process after around 55 minutes. In /var/log/lfd.log we see the following messages: ---------------------------------------------------------------------------------------------------------...