ConfigServer Community Forum

I've problem to install csf in gentoo i'm getting this error Error: /sbin/ifconfig (ifconfig binary location) -v does not exist!, at line 2161

root@server# sh install.generic.sh
Installing generic csf and lfd

Check we're running as root

Checking Perl modules...mode of 'os.pl' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)
Configuration modified for Debian/Ubuntu/Gentoo settings...

i have already ConfigServer Security & Firewall

but i i have installed the following plugin

http:// knowledgelayer.softlayer . com/procedure/install-and-configure-advanced-policy-firewall-apf

acutally its showing sucessful .. but not shown in plugins list ,..

After this

ConfigServer Security & Firewall is stopped .. when i click start its showing started then again automatically stopped...

Hello

i am using your csf service for 2 dedicated server where i got almost all next day attack report from different IP address on both server with same computer name:

1.
Time: Thu Aug 18 11:46:45 2011 -0500
IP: 183.1.164.118 (CN/China/-)
Failures: 5 (smtpauth)
Interval: 300 seconds
Blocked: Permanent Block
Log entries:

2011-08-18 11:46:24 dovecot_login authenticator failed for (ylmf-pc) :...

Hi, I'm new to starting using CSF. Using this in my WHM/Cpanel account. I've done a recent install and I experience my web site does not launch giving me This web page is not available ... If I disable CSF then the site loads ok and after it loads fine I re-enable CSF and site continues to load ok with out the error. Wondering to know why?

Also, a second issue I find is that when I initially...

Good Morning,
i had a trouble with CSF
i'm always have high DDOS Attack 50 M, 100 M .. etc
i'm always blocking all ips that making high connections but when i block it
it's non response before 20 mins !
i'm using csf -d IP , sure csf blocking them automatically and if i found these ips repeated more than 5 or 7 times
so how can i blocking these ips immediately ? btw there's no high load ..

Tnx now work. Another question,

Cluster member x.x.x.x (IT/Italy/xxx.xxx) said, DENY x.x.x.x (IR/Iran, Islamic Republic of/-) - *Blocked in csf* for 3600 secs

How can I increase the secs of ban ?

Yesterday I got CSF upgrade notifications from 2 servers:

Upgrading csf from v6.22 to 6.24........

Usually after upgrade comes an alert:

System Integrity checking detected a modified system file ... /usr/sbin/csf: FAILED

but not this time. Almost 24 hours are over but I didn't get any notification about modified sustem file. Is this OK?

Hello,

I constantly receive this e-mail for all my server every few days. Any ideas?

A new app has been registered with AppConfig.

Name: csf
Service: whostmgr
ACLS required: software-ConfigServer-csf
System User: root
URL(s): /cgi/configserver/csf.cgi
Display Name: ConfigServer Security& Firewall
Entry URL: configserver/csf.cgi

You can view all current registered apps here: Apps...

Hi all

Im using Csf for voip traffic
when CSf is enable i can not pass any call using media proxy if it pass no sound will heard while if i make call using Signaling proxy sound will hear well
if i disable Csf in media also i can hear voice

anyone can help me on this issue?

thanks in advance

I use CC_DENY on one country, for example TW (Taiwan), works, but I do TW,CN,RU,RO,NL,VN,KR
and it does not work at all. Help?

is there any way to block an IP, but only http traffic (port 80) and that other services work?

for example, from a certain IP, can not navigate but that the email does work?

how to do it by csf?

Hello,

From time to time I get emails reporting that some IP address was blocked for port scanning. That's very good but sometimes I discover that blocked IP address belong to a user of my website and I am sure this user do not scan ports of my server. Is it possible that some computers run port scans without knowledge of the owners?

Hi,

I think tonight has updated CSF for cPanel. The problem is now, Resellers can´t see the CSF fields to unblock or block Ip´s

There is any error on the update? I can see it all good on WHM root, but WHM resellers don´t Show CSF.

Thank you.

Is it possible for you to add a duration for a withe listing, next to the withe list option ? Example : a drop down list with 12, 24, 72 etc ...

Has anyone had any success getting EVault to work with SoftLayer? I have been going round and round trying to get this to work and every time csf is enabled, I cannot get my server to communicate with the backup program.

These are the ports that I have opened (with no sucess):
2546,2548,8086,8087,8021

Any help would be great!

Scott

Does anyone know for how long time CSF/LFD blocks IP address in case of 5 failed logins? Yesterday my IP address got blocked. 24 hours are over and I am still blocked.

How can I unblock my IP address when I access the server from another IP address?

Thanks.

I added the following port ranges to my CSF install and they don't work. Some people can't connect to the Ventrilo/TeamSpeak servers behind these port ranges 3000:4207,8767:8779. It's my understanding adding a port range allows all the ports withing that range to be opened so why am I having issues with people connecting? If I disable CSF players can connect with no issues. The Port ranges are...

Hello,
1.) i get here some errors to get following blocklists : Jul 13 07:18:47 bf2-gs lfd : Unable to retrieve blocklist MAXMIND - Unable to download: 599 - IO::Socket::SSL 1.42 must be installed for https support

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve blocklist HONEYPOT - Unable to download: 599 - Malformed Status-Line: HTTP/1.1 303\r\n

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve...

I get multiple copies of this email
Time: Sun Jul 14 05:12:23 2013 +0700
PID: 23073 (Parent PID:29765)
Account: apache
Uptime: 4220 seconds

Executable:

/usr/sbin/httpd

Command Line (often faked in exploits):

/usr/sbin/httpd

Network connections by the process (if any):

tcp: 0.0.0.0:80 -> 0.0.0.0:0

I have
cmd:/usr/sbin/httpd
exe:usr/sbin/httpd

in csf.pignore already, and restarted...

Hi,

I'm having issue with DNS replication using named . Basically, I configured named as slave DNS (IP: 192.168.1.3) to retrieve the zones from a master DNS (IP: 192.168.1.2). cfs is installed on the slave DNS (IP: 192.168.1.3).

When I execute named , the log indicates that the IP 192.168.1.2#53 is unreachable. If I stop csf on the slave DNS, then it replicates fine.

I tried adding the...