ConfigServer Community Forum

Hello,
1.) i get here some errors to get following blocklists : Jul 13 07:18:47 bf2-gs lfd : Unable to retrieve blocklist MAXMIND - Unable to download: 599 - IO::Socket::SSL 1.42 must be installed for https support

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve blocklist HONEYPOT - Unable to download: 599 - Malformed Status-Line: HTTP/1.1 303\r\n

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve...

I get multiple copies of this email
Time: Sun Jul 14 05:12:23 2013 +0700
PID: 23073 (Parent PID:29765)
Account: apache
Uptime: 4220 seconds

Executable:

/usr/sbin/httpd

Command Line (often faked in exploits):

/usr/sbin/httpd

Network connections by the process (if any):

tcp: 0.0.0.0:80 -> 0.0.0.0:0

I have
cmd:/usr/sbin/httpd
exe:usr/sbin/httpd

in csf.pignore already, and restarted...

Hi,

I'm having issue with DNS replication using named . Basically, I configured named as slave DNS (IP: 192.168.1.3) to retrieve the zones from a master DNS (IP: 192.168.1.2). cfs is installed on the slave DNS (IP: 192.168.1.3).

When I execute named , the log indicates that the IP 192.168.1.2#53 is unreachable. If I stop csf on the slave DNS, then it replicates fine.

I tried adding the...

Hello!

Must we remove cPHulk Brute Force Detection before tar -xzf csf.tgz or can these two work together?

Thank You!

Zero

Hi there,

I am running the latest version of ConfigServer Firewall on Centos 6.
I have a TeamSpeak3 server running also on 185.13.225.90:9987.

In the configuration file i added all TCP and UDP ports used by TeamSpeak3.

Some people can connect with my server without a problem, others cannot connect and are getting a connection error.
After this, they are also not able to acces my website for...

I'm trying to hunt down the cause of this alert on a new centos setup (not cpanel)

I'm actually running percona mysql but it should be the same?

Looking at the source it looks like it must fail right off on the connection itself.

Note that .my.cnf DOES exist and csf has root as the login and blank password so it should use .mycnf

I don't see any other access errors, how can I debug if it's...

hello i have a problem with ip blocking csf is blocking all ips except for mine and i have to allow all of the 1 by 1 in csf Allow so they can enter my team speak server is there a way to allow all ip addreses to enter my servers without me having to manualy add them 1 by 1 :@

Hello,

i use code-google-com/p/franksworld/downloads/detail?name=unblockme-2.0.zip&can=2&q= and worl well,

but some of my servers can not work and they work with csf v6.21 now,

does anyone know if the new csf v6.21 has conflict with the unblockme-2.0 ?

thank you.

My clientsarewhensendingfiles to theFTPis being blocked byportscan..
blocked for port scanning While using FTP to send files
see below

lfd on domain: 187.65.106.56 (BR/Brazil/bb416a38.domain) blocked for port scanningTime: Thu Jan 5 19:03:09 2012 -0200
IP: 187.65.106.56 (BR/Brazil/bb416a38.domain)
Hits: 6
Blocked: Temporary Block

Sample of block hits:
Jan 5 19:02:30 srv kernel: Firewall:...

Hello,

Now that cPanel have released a new update featuring their AppConfig system, we've a customer whose lost CXS and CSF within the plugins section of WHM. When attempting to perform an upgrade, we see:

warn Failed to create a temp file using get_tmp_file_by_name using templatefile: /var/tmp/14111._USR_LOCAL_CPANEL_BIN_REGISTER_APPCONFIG__
Failed to generate a temp file.

drwxrwxrwt 0...

Hello,
i install csf with install*directadmin*sh but i have a problem and that is when i login to my directadmin admin it does not show GUI can any one help me how cna i solve it ?
i execute following command but no solved.
chattr -i /usr/local/directadmin/plugins/csf
thanks,

Hi,
On 5 servers, csf has failed to update since version 6.15. Only just noticed this today so manually updated all to 6.20
Servers are on different networks and auto update set to 1
Note, the upgrade from 13 >15 did not show the error reported here

Hi,

Great product. We are experiencing attacks on our ssh port,we have changed the port but still continues.

Can you please explain how and what to enter to allow a subnet into ssh port and deny all others access to ssh port?

Very new to csf.

Thanks.

Im seeing a BUNCH of distributed FTP attacks - they started a few weeks ago - for a time I disabled FTP - then I renabled it and now they are back

They are attempting to login using ADMIN and USER accounts - which of course dont exist
They may be referring to default windows accounts not sure but they dont exist in cpanel linux servers

Im wondering if its possible to block IPs as soon as...

Hi There,

Running CSF 6.15.

It would seem that no matter what port mysql is on, if it is not bound to the localhost (127.0.0.1), then the port it uses cannot be closed!

I have tested this with several ports/configurations of both CSF and MySQL, restarting both.

A port scan reveals the ports.

Is this normal behavior, or a bug in my system setup?

Hyper-V VPS:
CentOS 5.9 (Final) (Linux...

I have ConfigServer Security & Firewall installed on my WHM/cPanel server. It's great and really thwarts a lot of intrusion attempts as well as other security features.

Have one BIG problem however. For security I have SMTP_BLOCK enabled to stop spam out from malicious scripts (if any where ever installed). Under CSF configuration I have SMTP_ALLOWUSER set to the accounts that I always want to...

I upgraded to cP 11.38.0.16 on 6/14/13. Afterwards (on the same day) I updated all CSF scripts with: curl -s configserver.com/free/csupdate | perl as suggested in the log.

Last night (6/17/13) or early this morning MailScanner stopped running (which hasn't happened in a very long time). In going through the logs to investigate what caused it, I found these entries in...

What does this message in lfd.log mean? I see it on both nodes in a newly configured generic Linux server cluster. I don't see it on my cPanel server cluster, which also includes one generic Linux server. Is something misconfigured?

Nov 9 11:10:57 xxxxxxxx lfd : *WARNING* Cluster member xxx.xxx.xxx.xxx (xxxx.xxxxxx.xxx) talking nonsense

csf: v5.70 (generic)
CentOS release 5.8 (Final)

I've been trying to work out why cPanel backups (New and Legacy) are causing massive load spikes making my server unusable. So far, with the help of cPanel support, it's been narrowed down to lfd.

They installed a system snapshot script to monitor the services, I then reported at the moment the spikes were happening. They used this information to check which service has been causing the...