ConfigServer Community Forum

Hello, i am new to linux i recently installed CSF on my server and i dont know what bad i configured after that i am not able to install any plugin through wordpress plugin directory it says couldn't connect to host
also copy function not working cannot copy anything from remote server using pHP.
When firewall is disabled everything works perfect
Thanks

Time: Sat Jun 25 18:16:39 2016 +0200
PID: 32341 (Parent PID:32341)
Account: rpc
Uptime: 62454 seconds
Executable: /usr/sbin/rpcbind
Command Line (often faked in exploits): /sbin/rpcbind -w

I tried to Add ignore rules here: nano /etc/csf/csf.pignore like this:

pcmd:/sbin/rpcbind -w

cmd:/sbin/rpcbind -w
user:rpc

This still did not stopped the emails to arrive? Anything I miss here? I also...

hello

regex.custom.pm has:

if (($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /ModSecurity.*Warning. Operator GT matched 3 at IP/)) {
return ( mod_security wp_login triggered by ,$1, wplogin , 1 , 80,443 , 1 );
}
if (($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /ModSecurity: Warning. Pattern match 200 at RESPONSE_STATUS/)) {
return ( mod_security wp_login triggered by ,$1, wplogin , 3...

Hi, I've been using CSF for around 6 months with no issues, but in the last 48 hours, presumably an update, I now get the following response when trying to access the menu page (.../cgi/addon_csf.cgi) in WHM:

Internal Server Error: 500
No response from subprocess (/usr/local/cpanel/whostmgr/docroot/cgi/addon_csf.cgi) with exit signal: 9
cpsrvd/11.34.2.8 Server at ds197305-1.lcnservers.com

The...

Hi all
I've got a problem with csf cluster of my 3 servers: only one of them can succesfully ping others.
This is my cluster config:
server01 (192.168.10.141):
CLUSTER_SENDTO = 192.168.10.141,192.168.10.154,192.168.10.155
CLUSTER_RECVFROM = 192.168.10.141,192.168.10.154,192.168.10.155
CLUSTER_MASTER = 192.168.10.155
CLUSTER_NAT = xx.xx.xx.155

server02 (192.168.10.154):
CLUSTER_SENDTO =...

Hi,

How can enable remote connections to mysql database on port 3306

for example for the IP 192.100.172.192

Thanks.

Hello
Google keep changing smtp ip addresses, How to enable smtp.gmail.com and pop.gmail.com in the CSF as hostname?

Just installed a Comodo SSL and I've been having problems periodically with reaching the site.
- When I disable CSF, I get straight through.
- When I restart CSF, I get straight through ... until it happens again.

I've created a cron job to restart CSF every 2 hours, but this is not a permanent fix.

What setting in CSF could be causing this?

I've talked with Comodo support and they get the...

hello there,

I have a server with custom regexp, but the regexp seems not able to be applied.

Am I forget something ?

CUSTOM2_LOg = var/log/exim/reject.log

regex example:

#!/usr/bin/perl
###############################################################################
# Copyright 2006-2016, Way to the Web Limited
# URL:
# Email: sales@waytotheweb.com...

Hi,

Apologies if this has already been covered before, but my initial search in the forum was not very helpful.

What I am trying to achieve on my cpanel server is, If a user from an IP is making multiple requests to any URL on our website, I want that IP to be blocked for sometime. We have no clue how can this be achieved. Any help will be appreciated.

So if an (IP) is making (n) requests to a...

Because of OVH's bug with blocking download.configserver I need to manually upgrade our servers.

Just wanted to be certain the install.sh is smart and can determine upgrade vs install by itself.

Looking at the source in CSF, it appears so, but just wanted to double check I wasn't missing any environmental variables, etc. before I accidentally clobber something. And it looks like csf+lfd should...

Hello! I'm sorry if this has been covered elsewhere; I couldn't find more info on it.

I'm trying to set up advanced port+ip filtering using the following rule:
tcp/udp|in/out|s/d=port|s/d=ip

My first question is, what's the correct syntax for this? My initial thought was this:
tcp|in|d=993|s=123.456.0.1
OR
tcp|in|d=993|s=123.456.0.0/15

... But I'm not sure if this is correct.

My second...

Hello,

I have CXS configured in all my servers, but I am having an issue with one of my clients

He uses his website on a classroom and where he has more than 20 to 30 students on the same classroom the CSF blocks his IPS,

What is the variable where I configure this for a higher number of simultaniuos connections under the same IP?

Regards

I am very confused. When I look at ip_out port 587 is open for outgoing traffic. However when I try and send mail through several different web applications it fails. If I turn off the firewall than it works perfectly.

I have tried port 25 as well and I get the same result.

What is even more confusing to me is that if telnet to smtp.sendgrid.net 587 then I can connect even with the firewall...

Hi,
I have received too many lfd alert mails.I have added the ip(116.31.116.47) in csf.deny but still receiving the alert mails regarding this IP. The mail states as :--

Time: Wed Jun 8 11:01:04 2016 +0100
PID: 26038 (Parent PID:26037)
Account: sshd
Uptime: 95 seconds

Executable:

/usr/local/sbin/sshd

Command Line (often faked in exploits):

sshd:

Network connections by the process (if...

When i send email from hotmail, gmail o any other corporate domain i cant recieve email, but if i disable the firewall i able to recieve.

What is missconfigurated on the firewall that restricts incoming mails?

Thanks

Hello,

I have a same problem with csf, i try all option to open port 43 buy still have a status close.

I do all what need.

Login with ssh to server , edit nano etc/csf/csf.conf

Found line
# Allow incoming TCP ports
TCP_IN = 20,21,22,25,26,37,43,53,80,110,113,443,465,873,2087,2089,2703

# Allow outgoing TCP ports
TCP_OUT = 20,21,22,25,26,37,43,53,80,110,113,443,465,873,2087,2089,2703

#...

Hi,

After i installed CSF i can't use wordpress admin panel - sometimes i can't save a page to be correct.
So i can login to admin panel but when i fill the page with date and on save i loose connection.
If i quick add my IP to the CSF it's good.

CSF is on default settings. Maybe (i am total noob) that hi is blocking a lot of PHP request for example, that may cause this. Maybe some rule is set...

Hi,

I'm having issue connecting to the UI, I've added my IP to the /etc/csf/csf.allow and /etc/csf/ui/ui.allow these were enabled by default UI = 1
UI_PORT = 6666

There is a server key and crt present,
SSL Key goes into /etc/csf/ui/server.key
SSL Certificate goes into /etc/csf/ui/server.crt

Tried all browsers still getting a time out, help would be appreciated. I need to put csf on 4...

Hello Guys,

We're seeing an increasing number of IP's getting blocked for 'aborted' logins. The messages look like:

May 17 12:52:25 ### dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user= , method=PLAIN, rip=###, lip=###, TLS, session=
May 17 12:52:31 ### dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user= , method=PLAIN, rip=###, lip=###,...