ConfigServer Community Forum

I've raised my max memory setting to 768MB and my max RSS Memory Setting to 512. These are much higher than the default settings. On a Linux server those are pretty large chunks of memory for an application to use. Nothing else triggers an LFD warning except Wordpress websites and I get a warning on the 768MB and 512MB limits about once or twice a day running 4 relatively medium traffic Wordpress...

Usually, when logging in server, LFD sends out a notification, and it includes correct location of my IP. However, for some locations, the IPs are recognised as Russian, while I am sitting in Oslo, Norway :)

I haven't changed any setting in Country Code Lists and Settings part yet. The default CC_SRC=1, which is using MaxMind. Now, do I need to enter MaxMind License Key for using correct IP...

can the PT_USERMEM setting be set to a higher level that 1024 it states but we have a lot of big busy Wordpress sites that ofter hover around 2Gb per process and wanted to keep the alerts coming but at the higher rate...

Hello,

I have been running a server with the GUI active on ConfigServer Security & Firewall - CSF v14.17 for many years. I currently have a site running on it that has an SSL certificate on it:

When I tell Chrome to view the certificate, I see that it is issued to the common name of server.domain.com and is up to date. It has been using Let's Encrypt and operating for many years.

I currently...

Hello!
I am having many blocks on port 38950 (rdp)
the ip (177.206.81.190) is trusted, but it is dynamic.
what can be done to solve this blocking?

7695 Feb 10 07:53:18 node113498-nginx lfd : *Port Scan* detected from 177.206.81.190 (BR/Brazil/177.206.81.190.dynamic.adsl.gvt.net.br). 11 hits in the last 175 seconds - *Blocked in csf* for 3600 secs

Feb 10 07:51:26 node113498-nginx kernel:...

Hello,

MESSENGER was working on my server but now, isn't. I checked all the log/configuration and didn't find why. Is there any option to restore the values to default, rebuild the files, etc?

Thank you.

In the `lfd Dynamic DNS` config section I have three subdomains listed:

myHost1.ddns.net
myHost2.ddns.net
myHost3.ddns.net

I am using DUC IP on my home computer and have verified that my public DNS name is `myHost1.ddns.net` - yet my computer is not able to SSH to my server. The only way I can SSH in is if I add my home networks IP to the `Firewall Allow IPs`

How can I resolve this so I can...

Solved, Thx.

Not having to move to a new page for all actions would be nice. It would also be easier and helpful if there was a way to delete multiple previous scan reports if logged in the database at a time. Even a little popup box to confirm.

Please and Thank you.

Hello,

We have a disgruntled customer that specifically created an email address to subscribe it to spam lists/newsletters and then they set up that email address to forward all emails to one of our support emails, creating a large amount of spam that can't really be blocked by traditional means. The original senders are, more or less, legitimate and mostly legitimate newsletters, so I wouldn't...

Having the instant IP block is an awesome feature and we use it frequently for repeat offenders. But these days so many spammers are sending from multiple IPs from a single CIDR 24 block. It would be so cool to have two options to click to block. One like the current single IP block, and a second one right next to it that blocks the entire range, ie NN.NN.NN.0/24. We do this manually at times but...

Hi there

A new server with Cloudlinux installed, Installed CFS, but all messages are logged to the console, making the console unusable.

I have no idea what setting needs to be done for this to stop. Any help is appreciated, as I am sure I am not the only one. This was presented before here: (but no fix was provided)

screen looks like this:

Instructions I think how to block tor in /etc/csf/csf.blocklists by uncommenting this line (remove the #):
#TOR|86400|0|
and in /etc/csf/csf.conf make sure URLGET is set to use LWP then restart the firewall

We leave the ip=1.2.3.4 and don't change it to our server ip address?

I've bunch of ips / networks added to csf.deny

csf.deny
1.1.0.0/19 # do not delete

However i want to allow 1.1.1.1 on port 80 and 443 with csf.allow

csf.allow
tcp|in|d=80|s=1.1.1.1
tcp|in|d=443|s=1.1.1.1

or

csf.allow
1.1.1.1

Allow rules above is not working.

- If i add IP adress to both csf.allow and csf.ignore it works but opens all ports which i don't want to
- Adding...

Does this error indicate a Zone file error? If so, what is the best way to correct it?
*ERROR* line:
Command:
Error:

This network is found in /var/lib/csf/Geo/ip2asn-combined.tsv & /var/lib/csf/zone/us.zone

Dear all,

I am using block_all_temp profile to temporarily block the IPs attempting a brute force attack. using this profile, it only allows me to block the IPs for 1 hour aftr this the IPs get unblocked. i want to customize this time to 5 min for example. so that, any IP trying brute force attack will be blocked for 5 minutes only. help will be grateful.

Hamza

Hi there,

With the High Load template for instance, there are set variables which don't seem to be documented.

This includes , , , , and however there doesn't seem to be a way to tweak them. For instance, we'd like to amend how ps is invoked (and likely include a 2nd copy of it, sorted differently), include iostat/sar reports and others.

How does one go about amending what the above variables...

Hi all,
I need help with Check Server Security configuration on cPanel VPS.
My VPS hosts mutliple Wordpress and various different Laravel CMS websites, along with some static content.

I need to know is it safe to do as Security says (disable) and will it impact my websites:
PHP Check
1. Check php for enable_dl or disabled dl()
2. Check php for disable_functions

Server Services Check
3....

I use Centos 7 and DirectAdmin have an issue with unblock adress IP. Validation recaptch works but adress IP still block.

In /home/csf/public_html/index.php file_put_contents doesn't work and unblock.txt and lfd_messenger.log don't create.
PHP Warning: file_put_contents(/home/csf/unblock.txt): failed to open stream: Permission denied in /home/csf/public_html/index.php on line 252PHP message:...

Hello, i want to know is this rule that i have wrote correct?
i mean that can we use source port and desteniation port after each other with same ip.
tcp|in|s=0_65535|s=x.x.x.x
tcp|in|d=(some specific ports)|s=x.x.x.x