ConfigServer Community Forum

I'm trying to add this link to my csf.blocklists file.

There is a problem however as I'm getting the following error: Unable to download: Can't connect to raw.githubusercontent.com:443 (certificate verify failed)

Is there any work around to this (there isn't an http equivalent page I can find)?

Thank you.

Hello,

One server out of all systems is having issues with SMTP_BLOCK seemingly applying itself even though its set to 0

The server functions fine for a month or so, then randomly denies all outbound connections to SMTP only. When we restart CSF, without any configuration changes, the issue is resolved.

Please help us know where to start looking. There's no obvious errors anywhere...

Hello. I have installed CSF on a WHM 11.38.2 (build 3) server.
I am making some adjustments to server settings based on the reocmmendations in the Check Server Security options.

I've made quite a few adjustments and rescanned each time and mysecurity rating increases each time as expected.

However there are 2 options that I think I've made the suggested changes properly, but when I recheck...

Hi,

On my server I have 2 IP addresses, let say xxx.xxx.xxx.xxx and xxx.xxx.xxx.yyy so what I want is to filter traffic with csf on the xxx.xxx.xxx.xxx IP and allow everything for xxx.xxx.xxx.yyy so in short the second IP xxx.xxx.xxx.yyy be completely ignored by csf and allow all the traffic.

I have tried as described here: but it is not working, the csf rules after restart are implemented to...

Can someone tell me why I'm getting hundreds of these emails below weekly and how to prevent it from happening again please?
I just blocked IP 50.22.179.3 but not sure if this is the solution. Thank you very much

Time: Wed Dec 11 05:17:24 2013 -0500
UID: 619 (ramyhids)
Hits: 11

Sample of port hits:
Dec 11 05:16:53 ns1 kernel: Firewall: *TCP_OUT Blocked* IN= OUT=venet0 SRC=MYVPSIP...

Hi,

I recently put up a new DNS server using 'bind9' and installed CSF.

I prefer to filter outgoing traffic, as much as possible, as well as incoming.

In the past, I allowed port 53 TCP and UDP in both incoming and outgoing directions with TCP_IN, TCP_OUT, UDP_IN and UDP_OUT.

However, apparently, by default and for security reasons, Bind9 uses random source ports for outside lookups. This...

Hello,

I have setup a new server today, and the RBL Check tools timeout on every RBL. I use this tools on other server and works well...but I have no clue why the timeout occur on RBL check on this server...

Screenshot:

Server is running centOS 7.x, lastest DirectAdmin and CSF version.

Sorry for my bad english, it's not my primary language....

Regards,

Hi,

I'm setting up a new server and although CSF installation seems to complete successfully, the CSF is not showing up in WHM > Plugins.

Any idea please?

I have been Googling this for awhile now, basically most of my website are UK specific so I always used the option to block Russa, China, Maxico etc using CSF but then I took on a client who has international visitors so I had to disable the country blocking I had setup.

Is there a way to turn the firewall off for just one specific domain, I can then go back to blocking all the countries that...

Hi

I posted another thread about problems running csf under centos7
But I didnt ask about firewalld

at the moment I disabled it and installed iptables/ip6tables -services

since firewalld seems to be the centos way now, are there any docs for how csf runs under centos7?

regards

l.

Hi

I just tried csf on a new centos 7.2 box at ovh
os is updated
kernel is 3.14.32

got this errors:

csf -r
*WARNING* URLGET set to use LWP but perl module is not installed, reverting to HTTP::Tiny
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `PREROUTING'
Flushing chain `INPUT'
Flushing chain `OUTPUT'
Flushing chain `POSTROUTING'
Flushing chain...

Hello,

I'm real new to owning a domain and a website. I use GoDaddy for hosting my domain in a Virtual Private Server and for domain name registration. They provide me with WHM / cPanel. I've installed CSF because I've been getting hammered by SSH brute-force type attacks daily.

I run Check Server Security and there was a lot wrong with my server. One of the suggestions says I should turn off...

Hello, last night I installed CSF and suddenly today I could not access via Plesk.
By accessing via SSH2 could put my ip in whitelist.
I wanted to ask that I enter to disable this rule please.
But if you work by blocking countries like China, Russia where they always attack me.
Thank you very much.

Hi, I've just had to change my nameserver IP addresses, my host done this for me (my hosting is colocated) and then sent me a message saying that when CSF is enabled CSF blocks DNS requests.

With CSF enabled the DNS servers do not respond
With CSF disabled the DNS servers do respond

Any help resolving this issue will be greatly appreciated.

Pete

Hi I hope someone can please help.

I have a server that I use externally for backup and cloud storage, however locally for convenience I'd like to allow samba shares.

I don't need these externally, just for my local network. Currently CSF+LFD just blocks Samba completely so I have to temorarily disable the firewall to use it. Does anybody please know how to just allow samba internally and keep...

It seems in my testing that the new ASN stuff in CSF 8.12 isn't working properly.

Eg: Added ASN AS2635 to CC_DENY. Then restart CSF and LFD. From LFD.log:

Jan 20 03:14:17 plesk125 lfd : CC: Extracting zone from GeoLite CSV Country/ASN database for
Jan 20 03:14:17 plesk125 lfd : CC: Repopulating ipset cc_as2635 with IP addresses from
Jan 20 03:14:17 plesk125 lfd : IPSET: loading set...

Dear Support,

We have csf installed, but I found the recent automatic update did not trigger the csfpre.sh after updating to v8.12 (generic) on multiple servers , losing all custom rules in the script. I have to manually restart csf again using csf -r to reload csfpre.sh. This is the second time we notice such behavior (the last time is v8.10->8.11).

Please note that this does not happen in...

Hi,

On the server panel it says version 8.12 available, while the latest based on the Changelog is 8.09?

What is that?

Weird thing just started happening this morning. Running WHM 54.0 build 1 and CSF 8.11.

Some users reported that they could not receive mail.

I had them test, and sending was fine, but not receiving, with various messages such as not being able to reach the server, and server response cannot POP.
Nothing in the logs, not lfd messages that they have been blocked, they just couldn't reach the...

Hello,

What means bruteforcelogin ?
The IP has called many Logins on Wordpress, Webmin, Plesk or other CMS/Controllpanels.
The Script use in the most cases Firefox19, BingBot and GoogleBot as UserAgent (grep for eval( or eval(base64_decode( in the Webspace) and often the name was mod_system.php

How prevent/block outgoing brute-force-attack (from our server to other destination server) by csf?...