ConfigServer Community Forum

AlmaLinux v8.8.0 STANDARD kvm + CPANEL

Any idea how to completely unistall CSF from my WHM? I followed the famouns instructions but nothing happens.

==============
cd /etc/csf
sh uninstall.sh
==============

Thanks

I am trying to configure csf to allow tcp and udp in and out on ports 1514,1515,5601 and 9200. After I save these changes in the csf.conf file, verify the changes have actually been saved and restart csf, the changes take effect for a few minutes to an hour and then the csf.conf reverts to it's default version by itself. This happens both when I do it from the terminal and when I use the UI to do...

Hi,

I would like to ask if there is a conflict in using ConfigServer Security & Firewall (CSF) even if we already have CloudFlare and Azure NSG. My understanding is that it will provide an additional security layer in WHM/CPanel, but our network admin has suggested not to install it due to a possible conflict. Any suggestions and recommendations are appreciated.

Thank you.

hi,
i have csf in centos7.9 with cpanel and when csf is enabled, host tracker cant ping ip server or any website,
when i disabled csf, everything is completely works fine,
so whats the problem?
in my all servers the problem is the same with csf.
* when csf is enabled, everyone can access their website or server but websites like host-tracker.com or check-host.net cant ping them with timeout error.

Hi,

csf version: v14.20 (cPanel)
LFD Messenger has stopped responding on IPv4. It only listens on IPv6:

# netstat -punta | grep lfd
tcp6 0 0 :::28887 :::* LISTEN 173311/lfd HTTPS me
tcp6 0 0 :::28888 :::* LISTEN 173312/lfd HTML mes
tcp6 0 0 :::28889 :::* LISTEN 173313/lfd TEXT mes

I don't know if this is happening after upgrading to v14.20 but I think so.

Thanks,

Ignacio

Hi there

Since a few weeks, 2 or 3, I started having a very strange issue.

The server cannot communicate on self (like doing a curl on it's own ip, or access an image from an url hosted on the same server).

I have 3 servers with the same os, same config, and only this one has the trouble.

Let's take an example of a php website that generates PDF, where in the pdf you have an image loaded by...

I have a new server running CloudLinux 8.8 and while csf starts, it gives the following errors at the end of the startup output;

Command:
Error:
You should check through the main output carefully

*ERROR* line:
Command:
Error:
You should check through the main output carefully

*ERROR* line:
Command:
Error:
You should check through the main output carefully

*ERROR* line:
Command:...

my python script it use requests lib , requests to graph.facebook.com (with alot of requests per seconds )
catch error showing :
HTTPSConnectionPool(host='graph.facebook.com', port=443): Max retries exceeded with url: /me/ (Caused by NewConnectionError(' : Failed to establish a new connection: Connection refused'))

when disable csf csf -x , it working perfectly.
all value of tcp_out, udp_out,...

I really much appreciated and want to thank you for the implementation of iptables-nft support.

As CPanel's Host Access Control dialogue on Rocky Linux 9.2 and WHM 114 showed errors I solved that by removing firewalld and installing iptables-nft. CSF and Host Access Control both work now without problems.

While reading about nftables I stumbled about the following Redhat documentation stating...

Almost every day, I receive lfd failed email notifications, followed by 1 lfd recovered email notification.

I have a VPS with InMotion. They told me I should look for answers here.

Hi,

Is there any way to receice an alert if csf or lfd turn off?

Best
Joao

Hi there,

when trying to access to UI from an nginx proxy, I have these weird error lines:

2023/09/20 15:43:20 2333492#2333492: *687017 upstream sent invalid header: \n ;
print Content-type: text/html\r\n ;
print \r\n ;
print \n ConfigServer Security & Firewall \n \n ;

That 'print \n ;' line should be added just before 'print '...

You are adding that line between HTTP headers, and this...

Hello all!
I have problem with CFS. almal 8.8+DA. CSF shows:
You should consider disabling commonly abused php functions, e.g.:
disable_functions = show_source, system, shell_exec, passthru, exec, popen, proc_open
Some client web scripts may break with some of these functions disabled, so you may have to remove them from this list:
Affected PHP versions:
/usr/local/php56/lib/php.ini...

I just spun up a new server to upgrade the OS to Almalinux 8. I purchased a new license to MailScanner FE and had ConfigServer install it on the new system. When the new and old systems swapped IP addresses, MSFE on both servers stopped working up in WHM (i.e. when I visit /cgi/configserver/mailscanner.cgi the page is blank). How do I fix this?

I don't think that I can use ConfigServer Servics...

Hello!
I'm having some problems with a invasion on a few WHM accounts, CXS is able to locate just a small portion of them and put them on quarantine.
We're also scanning with Imunify and removing the files and injections manually.

There is someway for me to make CXS more effective? I've been just running a few custom commands on the accounts and cleaning based on the report.

Hello,

I currently have Mailscanner running under CPanel and i was wondering if anyone managed to set it up in a way a user can just forward the email to a spam@ to pipe the emails into learning and also add it to the whitelist or even just auto-whitelist address when a learn request is issued.

Hello,
i recently was checking lfd.log ( i am using CSF/LFD with WHM/cPanel) and it caught my eye that although my server is constantly being targeted by potential perpetrators for trying to login by SMTP there are no entries in the lfd.log that indicate that lfd picks up these failed attempts.
Here is a grepped part of my exim_mainlog indicating failed smtp login attempts :
2023-09-13...

I quite often receive cxswatch notifications such as this:

cxswatch Scanning /home/-----------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php:

'/home/--------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php'
Universal decode regex match =

My server is...

Hi,
Currently in the watch/search log in CSF we only have :
/var/lib/mysql/myserver.myhost.err

Do you think it would be possible to have also the mysql Slow Query Log file access ?
/var/lib/mysql/myserver-slow.log

And why not also the general log ?
/var/lib/mysql/myserver.log

Thanks
Best regards

Hello,

I know this is my first post here, however I must do it since there is no support for CSF on Help Desk. Long story short I have a few ARM64 servers with AlmaLinux, Alibaba Cloud linux, Ubuntu 22; and CSF and LFD does not function properly. For instance, the CSF service on all of them:

● csf.service - ConfigServer Firewall & Security - csf
Loaded: loaded...