Anyone else seeing a dramatic increase in ftp attacks on their servers from RU, KZ, UA, BR and BY over the past 24 hours. Typically the firewall blocks 4-5 IP's a day. In the past 24 hours it has thrown permanent blocks up over 800 different IP's from these countries on various servers I run.
Got to the point that I just ended up blocking the CC's.
I have CC_DENY = a few countries which are notorious for malicious traffic. However, I have clients who deal in these countries and their mail is interrupted by these rules. I have been manually adding the mailserver IPs, however, is there a working solution for allowing SMTP traffic through these rules?
Thanks
Hi,
One of my servers suffered a network blow dealt by a datacenter problem. Crashed several database tables, other assorted things.
In the WHM area when I click on the CSF link in the bottom left instead of the full interface I just get the icon and the header image in the right pane.
The firewall is working, I know because I blocked myself and had to log in to one of my other servers and flush...
I am trying to build a New Debian 8 (Jessie) Apache2 Server for a project. I would like to secure the Server as much as possible to keep risks level to a minimum, So far, I was able to install everything after several days of trial and error. Right now, I am at the Security level of my project and ran into some difficulties getting the Firewall to allow access to a few key...
Hi, can anybody clarify me will Cluster setup copy all settings from master server, or it is only for blocked/allowed IPs. Because I have large amount of servers and setup manual of CSF for every server and changing something is really slow ?
Is it possible to have different csf.conf files for different network interfaces? I can see in the csf file where i can specific what interfaces the csf.conf acts on, but what if i want different csf.conf rules and settings for different network interfaces?
After I installed csf (which comes with 115 deny rules) I was able to add only 2 additional ones of my own, for a total of 117.
You have an unresolved error when starting csf:
Error: The VPS iptables rule limit (numiptent) is too low (396/405) -
stopping firewall to prevent iptables blocking all connections, at line 3041 in /usr/sbin/csf
In theory, the solution seems to be straightforward:...
So, I moved to a new server and install the CSF firewall.
So, im busy transferring all the domains to that server. So, now this morning i try to login in the WHM, cPanel. But it says The connection timed out. Please try again.
Even I can't visit websites.
So, that's so annoying that its even block myself on the firewall.
So, my question is. Is there any configuration how to set this to...
After a recent cPanel update, I'm not getting as many LOCALRELAY events in my lfd logs.. None of the thresholds have changed and I know of a few times the system should have tripped that alert. So, has anyone else experienced this?
I have noticed that my global allow rules are applying correctly to all CentOS 6 servers, but on CentOS 7 servers global allow rules are being applied partially.
By partially, I mean that /var/lib/csf/csf.gallow contains only between 30% or 60% of rules (rules are chopped off at random lines on each affected server) and in /var/log/lfd.log I regularly see iptables appears to have been flushed -...
I found my csf error and its unable to start, everytime i try to start it from whm or console, it always failed. even i have turned off the faststart function,
Here is the error message :
You have an unresolved error when starting csf:
Error: iptables command failed, you appear to be missing a required iptables module, at line 1508 in /usr/sbin/csf
I recently discovered csf and am very pleasantly surprised. It is a jewel.
My questions are not related to any problem, it is just simple curiosity. The system is unusual in two respects:
(1) Who owns csf? It seems to be in the middle between Open Source Software and commercial. The package seems to be distributed in binary form, and only in this site. I guess they get an income by selling and...
I recently RE installed cPanel and CSF, and although my country blocking seems to be doing great, LFD is not working 100% of the time.
The way it used to work for me was I would get emails from LFD telling me that there were blocks, but now I get 3 from cPanel Hulk and then 1 from LFD, whereas once I initially started using CSF, LFD would almost never let cPanel Hulk even do it's job, as it was...
Hi, I installed this tool to protect a mail server with postfix but I can not get work alerts POP3 - IMAP. Do not send emails even with well-made configurations. Could you help me?
My system statistics over the last 7 days shows a load spike of 4 million% and during the same period 60 trillion (!) apache connections...
This is certainly because cPanel auto-backup hit a snag and stopped deleting my rolling server backups. After a while this meant that I had completely run out of space on the server disks and things started to go wrong quickly.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum