Search found 36 matches

by sahostking
27 Sep 2014, 21:05
Forum: General Discussion (csf)
Topic: nf_ct_ftp attack from various IPs kill server
Replies: 1
Views: 2486

nf_ct_ftp attack from various IPs kill server

Hi, I have a weird issue. Server has been running smoothly for a few years now. But some weird issue occured today where I noticed alot of these from 1 IP: kernel: nf_ct_ftp: dropping packetIN= OUT=eth1 SRC=<IP Address> DST=<IP Address> LEN=90 TOS=0x00 PREC=0x00 TTL=64 ID=14581 DF PROTO=TCP SPT=21 D...
by sahostking
02 May 2014, 16:36
Forum: General Discussion (csf)
Topic: IPs not being blocked for ModSec
Replies: 5
Views: 8445

IPs not being blocked for ModSec

Hi all, Need some advice. LF_MODSEC = 5 LF_MODSEC_PERM = 300 LF_CXS = 1 LF_CXS_PERM = 300 I have the following settings and have Modsecurity, CXS and CSF installed though IPs are not being blocked after 5 ModSec hits: [Fri May 02 17:30:50.588560 2014] [:error] [pid 792706:tid 139737910183680] [clien...
by sahostking
15 Nov 2013, 09:22
Forum: General Discussion (cxs)
Topic: CXSwatch and CXS cron
Replies: 1
Views: 3148

CXSwatch and CXS cron

Hi,

To lower load for a webhost is running the cron job necessary.

Basically I was thinking:

1. Run CXS cronjob once a week
2. Have CXSWatch run all the time.

IS this good enough? Opinions
by sahostking
09 Nov 2013, 19:47
Forum: General Discussion (cxs)
Topic: CXS high CPU usage over 50%
Replies: 3
Views: 7911

Re: CXS high CPU usage over 50%

I'd also like to know - sitting with the same issue of high cpu usage for CXS
by sahostking
09 Nov 2013, 19:37
Forum: General Discussion (csf)
Topic: WHM Upgrade to 11.40.0 Excessive Dovecot now
Replies: 8
Views: 9706

Re: WHM Upgrade to 11.40.0 Excessive Dovecot now

Thanks just did this which helped. Not sure if it solves as to why it occured in this version itself that may be a dovecot issue but nevertheless could not stand the emails.

Thanks
by sahostking
14 Jun 2013, 07:32
Forum: MailScanner
Topic: Whitelist keeps resetting
Replies: 1
Views: 3002

Whitelist keeps resetting

Hi guys,

I enter a whitelist rule like "From: *.domain yes" into the spam.whitelist.rules file.

The next day I see it dissapearing or resetting. I do however see a few rules customers put in still at the top.
Just wondering why it keeps dissapearing when entered through terminal.