ConfigServer Community Forum

Hello!

Must we remove cPHulk Brute Force Detection before tar -xzf csf.tgz or can these two work together?

Thank You!

Zero

Hi there,

I am running the latest version of ConfigServer Firewall on Centos 6.
I have a TeamSpeak3 server running also on 185.13.225.90:9987.

In the configuration file i added all TCP and UDP ports used by TeamSpeak3.

Some people can connect with my server without a problem, others cannot connect and are getting a connection error.
After this, they are also not able to acces my website for...

I'm trying to hunt down the cause of this alert on a new centos setup (not cpanel)

I'm actually running percona mysql but it should be the same?

Looking at the source it looks like it must fail right off on the connection itself.

Note that .my.cnf DOES exist and csf has root as the login and blank password so it should use .mycnf

I don't see any other access errors, how can I debug if it's...

hello i have a problem with ip blocking csf is blocking all ips except for mine and i have to allow all of the 1 by 1 in csf Allow so they can enter my team speak server is there a way to allow all ip addreses to enter my servers without me having to manualy add them 1 by 1 :@

Hello,

i use code-google-com/p/franksworld/downloads/detail?name=unblockme-2.0.zip&can=2&q= and worl well,

but some of my servers can not work and they work with csf v6.21 now,

does anyone know if the new csf v6.21 has conflict with the unblockme-2.0 ?

thank you.

My clientsarewhensendingfiles to theFTPis being blocked byportscan..
blocked for port scanning While using FTP to send files
see below

lfd on domain: 187.65.106.56 (BR/Brazil/bb416a38.domain) blocked for port scanningTime: Thu Jan 5 19:03:09 2012 -0200
IP: 187.65.106.56 (BR/Brazil/bb416a38.domain)
Hits: 6
Blocked: Temporary Block

Sample of block hits:
Jan 5 19:02:30 srv kernel: Firewall:...

Hello,

Now that cPanel have released a new update featuring their AppConfig system, we've a customer whose lost CXS and CSF within the plugins section of WHM. When attempting to perform an upgrade, we see:

warn Failed to create a temp file using get_tmp_file_by_name using templatefile: /var/tmp/14111._USR_LOCAL_CPANEL_BIN_REGISTER_APPCONFIG__
Failed to generate a temp file.

drwxrwxrwt 0...

Hello,
i install csf with install*directadmin*sh but i have a problem and that is when i login to my directadmin admin it does not show GUI can any one help me how cna i solve it ?
i execute following command but no solved.
chattr -i /usr/local/directadmin/plugins/csf
thanks,

Hi,
On 5 servers, csf has failed to update since version 6.15. Only just noticed this today so manually updated all to 6.20
Servers are on different networks and auto update set to 1
Note, the upgrade from 13 >15 did not show the error reported here

Hi,

Great product. We are experiencing attacks on our ssh port,we have changed the port but still continues.

Can you please explain how and what to enter to allow a subnet into ssh port and deny all others access to ssh port?

Very new to csf.

Thanks.

Im seeing a BUNCH of distributed FTP attacks - they started a few weeks ago - for a time I disabled FTP - then I renabled it and now they are back

They are attempting to login using ADMIN and USER accounts - which of course dont exist
They may be referring to default windows accounts not sure but they dont exist in cpanel linux servers

Im wondering if its possible to block IPs as soon as...

Hi There,

Running CSF 6.15.

It would seem that no matter what port mysql is on, if it is not bound to the localhost (127.0.0.1), then the port it uses cannot be closed!

I have tested this with several ports/configurations of both CSF and MySQL, restarting both.

A port scan reveals the ports.

Is this normal behavior, or a bug in my system setup?

Hyper-V VPS:
CentOS 5.9 (Final) (Linux...

I have ConfigServer Security & Firewall installed on my WHM/cPanel server. It's great and really thwarts a lot of intrusion attempts as well as other security features.

Have one BIG problem however. For security I have SMTP_BLOCK enabled to stop spam out from malicious scripts (if any where ever installed). Under CSF configuration I have SMTP_ALLOWUSER set to the accounts that I always want to...

I upgraded to cP 11.38.0.16 on 6/14/13. Afterwards (on the same day) I updated all CSF scripts with: curl -s configserver.com/free/csupdate | perl as suggested in the log.

Last night (6/17/13) or early this morning MailScanner stopped running (which hasn't happened in a very long time). In going through the logs to investigate what caused it, I found these entries in...

What does this message in lfd.log mean? I see it on both nodes in a newly configured generic Linux server cluster. I don't see it on my cPanel server cluster, which also includes one generic Linux server. Is something misconfigured?

Nov 9 11:10:57 xxxxxxxx lfd : *WARNING* Cluster member xxx.xxx.xxx.xxx (xxxx.xxxxxx.xxx) talking nonsense

csf: v5.70 (generic)
CentOS release 5.8 (Final)

I've been trying to work out why cPanel backups (New and Legacy) are causing massive load spikes making my server unusable. So far, with the help of cPanel support, it's been narrowed down to lfd.

They installed a system snapshot script to monitor the services, I then reported at the moment the spikes were happening. They used this information to check which service has been causing the...

Hello,

I have CSF on a cPanel server, and two times within the past two weeks I've received an email from the cPanel Service Monitor saying that LFD had stopped and had been restarted. I checked /var/log/lfd.log and found this:

Jun 16 14:46:21 gerald lfd : *SSH login* from X into the Y account using publickey authentication
Jun 16 15:16:27 gerald lfd : *SSH login* from X into the Y account...

Hello,
Whe are suffering from attacks / login atemps from perfect-privacy.com.
is there anyway to bock this domain..
the have serveral servers around the world so blocking by IP address is not a option.
There is no list availible of al the servers from this..

Hello All

i have a server with openvz kernel , and i have a vps with cpanel .

when i activating the csf , no access to the vps . i should disable csf to get it work again .

i have followed all the tips that i should do in the host node and in the vps conf .

i have applied the suggestion from the sticky thread , i have changed the port to the venet0+ and no success . all test give me ok ....