Search found 4 matches
- 24 Feb 2016, 07:04
- Forum: General Discussion (csf)
- Topic: Allowing certain users access to an interface
- Replies: 1
- Views: 2235
Re: Allowing certain users access to an interface
Okay I've semi-worked out how to do this; I have added the following to the csfpre.sh file: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP However, we have rules in the csf.allow file that allow access to certain ports on the eth1 subnet, which seem to...
- 27 Jan 2016, 08:05
- Forum: General Discussion (csf)
- Topic: Allowing certain users access to an interface
- Replies: 1
- Views: 2235
Allowing certain users access to an interface
Hi there, Firstly, to explain my current set up, I have a home server with two interfaces, eth0 (public interface) and eth1 (private interface). eth1 is used for my internal network and backups. I would like to block *all* users from doing anything on eth1, and only allow certain system users, such ...
- 02 Jan 2015, 05:47
- Forum: General Discussion (csf)
- Topic: Preventing CSF from killing a certain process
- Replies: 3
- Views: 5686
Re: Preventing CSF from killing a certain process
Thanks but are you sure it's not CSF (or LFD)? Based on this log entry, and the fact it says "suspicious process", it seems like it's definitely being killed: Dec 12 12:21:19 hostname lfd[664824]: *Suspicious Process* PID:652751 PPID:652750 User:ataorgau Uptime:95 secs EXE:/usr/bin/ssh CMD...
- 31 Dec 2014, 02:32
- Forum: General Discussion (csf)
- Topic: Preventing CSF from killing a certain process
- Replies: 3
- Views: 5686
Preventing CSF from killing a certain process
Hi there, We are trying to SCP a large file from one of our servers, however CSF appears to be killing the SCP process after around 55 minutes. In /var/log/lfd.log we see the following messages: ---------------------------------------------------------------------------------------------------------...