ConfigServer Community Forum

Have installed varnish cache but now notice lfd logs say mod_security rules are triggered by servers own IP address so will be ignored. Any way to get csf/lfd to list the real IPs so they can be blocked?

Hello! I hope someone can get me on the right path with this.

We have a customer who is set up with ControlScan (Axia) for their PCI compliance. The last scan resulted in a scan may have been dynamically blocked by an IPS for port 80.

I have PS_INTERVAL set to 0 in my CSF configuration, and I have ControlScan's scanning IP range but I'm not sure if I need to set that somewhere or not. I have...

Hello,
When I install php-fpm or suphp or fastcgi in diretctadmin and check server security in CSF firewall I get this:
Check php for enable_dl or disabled dl() You should modify /usr/local/lib/php.ini and set:
enable_dl = Off
This prevents users from loading php modules that affect everyone on the server. Note that if use dynamic libraries, such as ioncube, you will have to load them directly in...

Hello everybody,

Sinece several years ago, i´ve using Configserver plugins trough CPanel, However, today i have the opportunity to have a server with a different panel (ISPConfig). Looks to be good panel but i have a porblem with it.
I have installed Configserver Firewall and i thought that this would create a GUI into this panel but it wasn´t. Im not a server administrator and im not very smart...

Good afternoon,

I was wondering if its possible to run Exim spam monitoring without cpanel installed?
csf.conf does not want to recognize option without cpanel???
( how to enable LF_SCRIPT_ALERT without cpanel?? )

I'v seen this question asked as far as 2007...
Still no implementation???

Hi,

I have a small question. I have my clients sites on the server and I have my own site on that server as well. I have live chat on my site. Now when some one blocked his IP say for failed login attempts for imap or POP or ftp or cPanel. Then that person is not able to access the live chat being on same server where the IP is blocked.

Now can we have something like that where I can white list...

Hi there,

Firstly, to explain my current set up, I have a home server with two interfaces, eth0 (public interface) and eth1 (private interface). eth1 is used for my internal network and backups.

I would like to block *all* users from doing anything on eth1, and only allow certain system users, such as root, cPanel, etc.

What would be the best / recommended way to achieve this?
Please do not...

Does CSF/LFD only trigger BLOCK REPORT script execution when LFD blocks an IP?

I've set up a script to take an action on receipt of notification of a blocked IP. Run manually from the command line it works fine like this:

sh myscript.sh 1.1.1.1

The script is owned by root and has permissions set to 700.

I set the BLOCK REPORT value by editing the csf.conf file, and then restarted CSF/LFD....

Over the last few days, unable to connect to download server.

root@us2 # /usr/sbin/csf -u
Oops: Unable to download: Can't connect to download.configserver.com:443 (timeout)

Could it be the server IP was blocked from configserver.com download server?

Thanks!

Hello, I wish to report a bug.

After kernel upgrade to the version below, joomla websites in particular and rvistebuilder not load. They show timeout. Sites in joomla take about 20 seconds to load.

Linux server.xxxxxxxx.net 2.6.32-573.18.1.el6.x86_64 #1 SMP Tue Feb 9 22:46:17 UTC 2016 x86_64 x86_64 x86_64 GNU/Li

CENTOS 6.7 x86_64 standard – server WHM 54.0 (build 17)

When I turn off the...

I'm trying to add this link to my csf.blocklists file.

There is a problem however as I'm getting the following error: Unable to download: Can't connect to raw.githubusercontent.com:443 (certificate verify failed)

Is there any work around to this (there isn't an http equivalent page I can find)?

Thank you.

Hello,

One server out of all systems is having issues with SMTP_BLOCK seemingly applying itself even though its set to 0

The server functions fine for a month or so, then randomly denies all outbound connections to SMTP only. When we restart CSF, without any configuration changes, the issue is resolved.

Please help us know where to start looking. There's no obvious errors anywhere...

Hello. I have installed CSF on a WHM 11.38.2 (build 3) server.
I am making some adjustments to server settings based on the reocmmendations in the Check Server Security options.

I've made quite a few adjustments and rescanned each time and mysecurity rating increases each time as expected.

However there are 2 options that I think I've made the suggested changes properly, but when I recheck...

Hi,

On my server I have 2 IP addresses, let say xxx.xxx.xxx.xxx and xxx.xxx.xxx.yyy so what I want is to filter traffic with csf on the xxx.xxx.xxx.xxx IP and allow everything for xxx.xxx.xxx.yyy so in short the second IP xxx.xxx.xxx.yyy be completely ignored by csf and allow all the traffic.

I have tried as described here: but it is not working, the csf rules after restart are implemented to...

Can someone tell me why I'm getting hundreds of these emails below weekly and how to prevent it from happening again please?
I just blocked IP 50.22.179.3 but not sure if this is the solution. Thank you very much

Time: Wed Dec 11 05:17:24 2013 -0500
UID: 619 (ramyhids)
Hits: 11

Sample of port hits:
Dec 11 05:16:53 ns1 kernel: Firewall: *TCP_OUT Blocked* IN= OUT=venet0 SRC=MYVPSIP...

Hi,

I recently put up a new DNS server using 'bind9' and installed CSF.

I prefer to filter outgoing traffic, as much as possible, as well as incoming.

In the past, I allowed port 53 TCP and UDP in both incoming and outgoing directions with TCP_IN, TCP_OUT, UDP_IN and UDP_OUT.

However, apparently, by default and for security reasons, Bind9 uses random source ports for outside lookups. This...

Hello,

I have setup a new server today, and the RBL Check tools timeout on every RBL. I use this tools on other server and works well...but I have no clue why the timeout occur on RBL check on this server...

Screenshot:

Server is running centOS 7.x, lastest DirectAdmin and CSF version.

Sorry for my bad english, it's not my primary language....

Regards,

Hi,

I'm setting up a new server and although CSF installation seems to complete successfully, the CSF is not showing up in WHM > Plugins.

Any idea please?

I have been Googling this for awhile now, basically most of my website are UK specific so I always used the option to block Russa, China, Maxico etc using CSF but then I took on a client who has international visitors so I had to disable the country blocking I had setup.

Is there a way to turn the firewall off for just one specific domain, I can then go back to blocking all the countries that...

Hi

I posted another thread about problems running csf under centos7
But I didnt ask about firewalld

at the moment I disabled it and installed iptables/ip6tables -services

since firewalld seems to be the centos way now, are there any docs for how csf runs under centos7?

regards

l.