ConfigServer Community Forum

Hi

I have several hosting accounts on my cPanel server, however for one of the accounts I want to disable access to all connections apart from 1 specified IP and port (including disabling apache access).

The account has a dedicated IP address.

Is it possible to do this?

Thanks

Hallo,

I was wondering if CSF can keep up with 10gbit internet. Does anyone have experience with it?

Best Regards,

Laurens

I've problem to install csf in gentoo i'm getting this error Error: /sbin/ifconfig (ifconfig binary location) -v does not exist!, at line 2161

root@server# sh install.generic.sh
Installing generic csf and lfd

Check we're running as root

Checking Perl modules...mode of 'os.pl' changed from 0755 (rwxr-xr-x) to 0700 (rwx------)
Configuration modified for Debian/Ubuntu/Gentoo settings...

i have already ConfigServer Security & Firewall

but i i have installed the following plugin

http:// knowledgelayer.softlayer . com/procedure/install-and-configure-advanced-policy-firewall-apf

acutally its showing sucessful .. but not shown in plugins list ,..

After this

ConfigServer Security & Firewall is stopped .. when i click start its showing started then again automatically stopped...

Hello

i am using your csf service for 2 dedicated server where i got almost all next day attack report from different IP address on both server with same computer name:

1.
Time: Thu Aug 18 11:46:45 2011 -0500
IP: 183.1.164.118 (CN/China/-)
Failures: 5 (smtpauth)
Interval: 300 seconds
Blocked: Permanent Block
Log entries:

2011-08-18 11:46:24 dovecot_login authenticator failed for (ylmf-pc) :...

Hi, I'm new to starting using CSF. Using this in my WHM/Cpanel account. I've done a recent install and I experience my web site does not launch giving me This web page is not available ... If I disable CSF then the site loads ok and after it loads fine I re-enable CSF and site continues to load ok with out the error. Wondering to know why?

Also, a second issue I find is that when I initially...

Good Morning,
i had a trouble with CSF
i'm always have high DDOS Attack 50 M, 100 M .. etc
i'm always blocking all ips that making high connections but when i block it
it's non response before 20 mins !
i'm using csf -d IP , sure csf blocking them automatically and if i found these ips repeated more than 5 or 7 times
so how can i blocking these ips immediately ? btw there's no high load ..

Tnx now work. Another question,

Cluster member x.x.x.x (IT/Italy/xxx.xxx) said, DENY x.x.x.x (IR/Iran, Islamic Republic of/-) - *Blocked in csf* for 3600 secs

How can I increase the secs of ban ?

Yesterday I got CSF upgrade notifications from 2 servers:

Upgrading csf from v6.22 to 6.24........

Usually after upgrade comes an alert:

System Integrity checking detected a modified system file ... /usr/sbin/csf: FAILED

but not this time. Almost 24 hours are over but I didn't get any notification about modified sustem file. Is this OK?

Hello,

I constantly receive this e-mail for all my server every few days. Any ideas?

A new app has been registered with AppConfig.

Name: csf
Service: whostmgr
ACLS required: software-ConfigServer-csf
System User: root
URL(s): /cgi/configserver/csf.cgi
Display Name: ConfigServer Security& Firewall
Entry URL: configserver/csf.cgi

You can view all current registered apps here: Apps...

Hi all

Im using Csf for voip traffic
when CSf is enable i can not pass any call using media proxy if it pass no sound will heard while if i make call using Signaling proxy sound will hear well
if i disable Csf in media also i can hear voice

anyone can help me on this issue?

thanks in advance

I use CC_DENY on one country, for example TW (Taiwan), works, but I do TW,CN,RU,RO,NL,VN,KR
and it does not work at all. Help?

is there any way to block an IP, but only http traffic (port 80) and that other services work?

for example, from a certain IP, can not navigate but that the email does work?

how to do it by csf?

Hello,

From time to time I get emails reporting that some IP address was blocked for port scanning. That's very good but sometimes I discover that blocked IP address belong to a user of my website and I am sure this user do not scan ports of my server. Is it possible that some computers run port scans without knowledge of the owners?

Hi,

I think tonight has updated CSF for cPanel. The problem is now, Resellers can´t see the CSF fields to unblock or block Ip´s

There is any error on the update? I can see it all good on WHM root, but WHM resellers don´t Show CSF.

Thank you.

Is it possible for you to add a duration for a withe listing, next to the withe list option ? Example : a drop down list with 12, 24, 72 etc ...

Has anyone had any success getting EVault to work with SoftLayer? I have been going round and round trying to get this to work and every time csf is enabled, I cannot get my server to communicate with the backup program.

These are the ports that I have opened (with no sucess):
2546,2548,8086,8087,8021

Any help would be great!

Scott

Does anyone know for how long time CSF/LFD blocks IP address in case of 5 failed logins? Yesterday my IP address got blocked. 24 hours are over and I am still blocked.

How can I unblock my IP address when I access the server from another IP address?

Thanks.

I added the following port ranges to my CSF install and they don't work. Some people can't connect to the Ventrilo/TeamSpeak servers behind these port ranges 3000:4207,8767:8779. It's my understanding adding a port range allows all the ports withing that range to be opened so why am I having issues with people connecting? If I disable CSF players can connect with no issues. The Port ranges are...

Hello,
1.) i get here some errors to get following blocklists : Jul 13 07:18:47 bf2-gs lfd : Unable to retrieve blocklist MAXMIND - Unable to download: 599 - IO::Socket::SSL 1.42 must be installed for https support

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve blocklist HONEYPOT - Unable to download: 599 - Malformed Status-Line: HTTP/1.1 303\r\n

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve...