ConfigServer Community Forum

Unable to connect to retry in 300 seconds. An Upgrade button will appear here if new version is detected

I cant see it in directadmin

Hi,

Is it possible to run CSF security report in SSH and either output it or send it to a file, as I have no control panel?

Thanks,
Gaz

Hello Guys !

I got a situation here: I installed a brand new server (CentOs 6.4 x64 - converted to CloudLinux) and after I installed csf firewall and it takes at least 3-5 minutes to restart. I saw that bandmin stops csf to restart very fast. In other servers this never happens and I don't know why. Also another thing is when the server reboots, it tooks a lot (~5 minutes) for bandmin to restart...

Is it possible to disable/set SMTP_ALLOWLOCAL to 1 but still allow webmail (Horde and Roundcube) usage? I have a particular account which has its wordpress constantly hacked even with auto-updates which I would like to just disable use of smtp_allowlocal altogether. It does have valid email accounts which are heavily used through their email software which eliminates many of the other options....

Hi

In csf I have this line UDP_OUT = 53,113,123,19567:19600
but I keep getting this in logs
Jul 16 23:03:52 xtest kernel: Firewall: *UDP_OUT Blocked* IN= OUT=eth0 SRC=x.x.x.53 DST=x.x.x.139 LEN=86 TOS=0x00 PREC=0x00 TTL=64 ID=62088 DF PROTO=UDP SPT=19567 DPT=10002 LEN=66 UID=1000 GID=1000

Any suggestions will be appreciated thnx

I installed CSF (8.01) on my new Debian 8 server. However, I am unable to start the csf service when IP6 is enabled in the csf configuration. I get the following error:
ip6tables v1.4.21: can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

Here's the full output from the restart:

Restarting csf...

Flushing...

One of our servers has just upgraded itself to CSF v8.0 and as far as I can tell, nothing specified in /etc/csf/csf.allow is being allowed anymore.

I can see the actual rules have been created properly in the ALLOWIN chain and I can see that the ALLOWIN chain is being called from the LOCALINPUT chain, but traffic is never making it into the LOCALINPUT chain in the first place.

From what I can...

Sorry if this has been discussed before - I tried searching using a few different terms. However, I'm getting grief from my hosting provider about the number of emails my VPS is sending. By far, the largest amount is coming from CSF/LFD alerts.

I'm was trying to find a configuration option to send one daily email with all alerts instead of individual alerts, but I wasn't able to see anything...

Hello, I have a Debian 8 VM (Jessie) running on Xen, I can not get it to block port scans.
I have set
PS_INTERVAL = 100
PS_LIMIT = 10

All other functions seem to work fine.

/etc/csf# /etc/csf/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK...

Hi All

I started getting this message on a cPanel vps after setting up a few accounts (I am the only one accessing this vps)

Time: Mon Jul 13 13:05:49 2015 +0100
File: /tmp/index.php
Reason: Script, file extension
Owner: falcon:falcon (500:500)
Action: No action taken

I have looked in the user falcon > root > tmp folder but it does not contain an index file.

I am currently get this message...

Hi,

I purchased and installed CSF and now I am facing issue with my ftp connection, FTP gets connected but files do not get uploaded and show no progress, says 0%. I turned off firewall and its now working.

Can anyone help me please?

Hello -

I am getting a lot of alerts of individual IPs that are being blocked even though I have a CIDR block setup to deny the block that would included the IP that is being blocked. I love Configserver and like that it is mostly working, but all the individual blocks are making me increase my Deny limit. This has been happening for several months now and I am running the latest version. Any...

I am trying to be passed for pci compliance by trustwave.
I set:
IGNORE_ALLOW = 0 and add their IP(s) to csf.ignore

But they are being blocked. Explanation from them is so:
Desc:
During the course of the scan, TrustKeeper detected an unidentified protocol on common web ports. In some cases, this may be caused by network security devices actively blocking the vulnerability scan, which it may...

After upgrade to latest version LFD stopped working on one server only...

This is the error reported in the lfd.log...

: Can't use string ( 31.8.173.147 ) as a SCALAR ref while strict refs in use at /usr/local/csf/lib/ConfigServer/CheckIP.pm line 33.
: daemon stopped

I tried to force update CSF, restart LFD multiple times, but it always die after 30 seconds.

Can someone please help with...

Hi, i run centos7.1 with csf firewall + directadmin and try unblock one ipv6 address and not success

first i enable Requires ip6tables and then i did it:

$ csf -a 2001:0503:ff39:1000:0000:0000:0000:0074 test
Adding 2001:0503:ff39:1000:0000:0000:0000:0074 to csf.allow and iptables ACCEPT...
ACCEPT all opt in !lo out * 2001:503:ff39:1000::74 -> ::/0
ACCEPT all opt in * out !lo ::/0 ->...

With the updated version 6 of CSF I can no longer use Country Codes to block. I used to block CN,RU and I do not want anything to do with these countries at all. All I ever get is a constant barrage of attacks a day by the hundreds. Now I need to add the Middle East and North Korea. any time I use a country code in the CC_DENY = Box I get an error if FASTSTART = is set to (true) 1. I can load...

Hi There,

Recently been hit by a distributed attack from many geo location on SMTP, system, FTP etc.

I tried and liked CC_ALLOW_FILTER = and added my country there and it was great, but little later realize that this block everyone (great) on all ports (including port:80).

Wondering if there is any way to block all ports except 80 from everywhere except my country?

I am looking for a more thorough explanation on this feature of CSF.

The way I understand it, this would block IP addresses of those sending X number of emails relayed through our server.

Since we do not allow relaying, at least the way I have always understood the term, this setting shouldn't matter.

The way I have always understood the term relay is the ability for anyone to send email...

Hello,

Sorry for posting here. I'm having this issue and couldn't get it resolved after reading a lot of threads here in the forum.

root@trine # csf -u
Oops: Unable to download: Can't connect to download.configserver.com:443 (timeout)

Resolving download.configserver.com... 2a01:4f8:a0:53cf::2, 85.10.199.177
Connecting to download.configserver.com|2a01:4f8:a0:53cf::2|:80... failed: Connection...

I've googled this a bit, but am not having any luck. Part of our perl libraries seems to be corrupted, and I have tried to --force to reinstall, but I am not sure which exact modules or command I should run to get this back up.

It is on a cpanel ( WHM 11.48.4 (build 4) ) /CentOS system, and when I try to reinstall csf, I get this:

Checking Perl modules...mode of `os.pl' retained as 0700...