This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
In the GUI (using WHM) for CSF, there is a simple wording error for the English language description.
Option: RECAPTCHA_NAT
If the server uses NAT then resolving the hostname to hosted IPs will likely not succeed. In that case, the external IP addresses must be listed as comma separated comma separated list here
lfd spawns a secondary process to handle &integrity()
This secondary process, when it encounters an error (in this case, inability to send a report because it can't reach the configured smtp server), calls &cleanup which subsequently calls unlink on the pid file. This then causes the pid file check near the top of the main while(1) loop to fail, which causes lfd's main process to exit.
I attempted to use an include in csf.redirect and received this error on executing csf -ra.
Error: csf: Incorrect csf.redirect setting ([]): , at line 3172
I removed the Include line and started csf with no issue.
Point of clarification: The readme.txt specifically states not to use comments at the end of the lines in the include file but mentions nothing about comments on lines by...
I've just enabled MESSENGERV2 on two servers and tested it, I get this php error: Warning: file_put_contents(/var/log/lfd_messenger.log) : failed to open stream: Permission denied in /home/csf/public_html/index.php on line 69
It looks like there was a change in the cPanel ACLs of 'software' to 'thirdparty' - - going from version 66 to 68. The ACL that CSF tries to set is currently 'software-ConfigServer-csf', but the 'software' ACL is no longer available.
This has broken reseller access to the CSF UI in WHM.
If any additional information is needed, please let me know.
The mod_security v2 (apache) regex (line 335 of RegexMain.pm) has a bug that prevents it from working with IPv6 addresses.
The rule matches the first block in the log entry, which contains the source port appended to the client IP. The rule does attempt to remove this source port, but only does so if splitting the IP by the ':' character returns a list of size 2. Obviously, this won't work for...
I tried Fedora for the first time today, and CSF failed to install correctly (I've been successful with Centos for quite some time).
Basically the systemd unit files, and the binaries get placed with incorrect SELinux context. I fixed the contexts in /usr/lib/systemd/system/ before I could copy them, but in /usr/sbin they were erroneously:
With MESSENGERV2 and MESSENGER_HTTPS enabled, any time a SSL certificate path changes (which with AutoSSL could be any time the AutoSSL process runs), the csf.messenger.conf file is then pointing to a non-existant file, which causes Apache to throw a syntax error and not start.
Unfortunately, it seems like there isn't currently a cPanel hook that will always catch every instance of an SSL...
We have device names with a dash in them:
# ifconfig
eth-internet: flags=4163 mtu 1500
-- SNIP --
eth-local: flags=4163 mtu 1500
-- SNIP --
lo: flags=73 mtu 65536
-- SNIP --
eth-local is a management interface and I want it to be skipped by csf, so I set ETH_DEVICE_SKIP to eth-local, however during start csf reports that this is not valid:
*WARNING* ETH_DEVICE_SKIP device not listed in...
We are facing issue of LFD daemon failure regularly.
In WHM, it shows running and enabled, but failed to start.
Following is the error LFD generate:
>> Starting ConfigServer Firewall & Security - lfd...
>> Error: You have an unresolved error when starting csf. You need to restart csf successfully before starting lfd (see /etc/csf/csf.error)
>> PID file /var/run/lfd.pid not readable...
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum