I've discovered that some email notifications fail on Plesk servers:
e.g.
When running the command csf --logrun the email is never sent out. LFD reports that the email was sent successfully (with debug on) but I see this in the mail logs:
Running Centos 7.1 on my VPS with firewalld disabled and iptables installed. CSF has been working without incident for 5 months until today when an update was available today which I installed.
When trying to restart csf/lfd it freezes at the line below. Although CSF states it is running it is not effective after several tests I did.
Unsure when it exactly started but we have disabled the login failure email alerts as such:
LF_EMAIL_ALERT = 0
However, we since started receiving login failure alerts for various services (FTPD, SMTP, etc). Again, not sure when it started up again, though believe it was within the last month or so.
I am getting the following error, in CSF, under WHM:
Unable to connect to download configserver com, retry in 135 seconds. An Upgrade button will appear here if new version is detected
I have never had an issue, with CSF, until today. I checked my server and can ping download configserver com. There doesn't seem to be any issues with my server (no DNS or connectivity issues found). Could my IP...
We have a couple of servers being regularly attached by a single Russian IP address - I've added it to the block list but 24 hours later it's removed (presumably by the 100 IP limit?) - is there a way to permanently permanently block an IP address?
Allowed users include the user that runs the PHP script.
Using WHMCS, I set up amazon SES for sending emails over port 587.
When I send an email, the first email goes through but after that, every other email times out. If I restart CSF, I can get 1 email through again, but then the rest time out.
I just wonder if there is a way to ensure that csf is enabled at server startup. I am asking this because I noticed today that when my server, due to a scheduled restart, was restarted, lfd did not start and it remained so until several hours later when I came to knwo about the problem after I checked my mails and had to restart csf manually.
When I visit my website from my cellphone through my routers wifi I can access my site without a problem.
However, when I switch off the wifi on my phone and access my site from the phone I can not access, csf blocks me. After doing a lfd and csf restart I can access without a problem.
When I switch wifi back on I can continue to browse my site. I switch wifi off again and same problem...
I am getting the following email many times since a blocked hacking attempt by almost the same IP. What is the meaning of this message ? How to ride of the message ?
202.0.0.0/8 is blocked by CSF.
Sample of port hits:
Apr 16 20:08:03 server kernel: Firewall: *UDP_OUT Blocked* IN=
OUT=venet0 SRC=xxx.xx.xxx.xxx DST=202.137.3.120 LEN=73 TOS=0x00 PREC=0x00 TTL=64
ID=51303 PROTO=UDP...
Hi, I'm using Mandrill's SMTP sending method, which works OK but periodically (sometimes 1 day, sometimes 5 days) stops working. At that point if I go into the CSF configuration and simply click Change without changing anything, after it reloads CSF and LFD the mail sends again.
The error message that shows when it stops working is smtp error: could not authenticate.
I have done a look through the forum and (amazingly) didn't find anything that matched - so, I guess I used the wrong search term!
I am testing (hence the seemingly strange restrictive values) my SSH Configuration and have these settings:
LF_TRIGGER = 1 (I don't care what service you try to access)
LF_TRIGGER_PERM = 1 (permanently block)
LF_SELECT = 0 (complete block)
LF_SSHD = 1 (active)...
It appears that after an upgrade from CSF/LFD v7.58 to 7.59 (01/27/15) the System integrity check e-mail is no longer being send on one of our servers.
I've already tried to solve this by restarting the firewall and changing LF_INTEGRITY from 3600 to 0 and then back to 3600 again, but this did not fix it.
Any ideas would be appreciated!
The server is running CentOS 6.6, WHM 11.48.0 build...
This is happening on a brand new server. (I.e. which was setup recently running latest cP with mod_security and CSF + CXS setup)
I have white listed Google bot, pingdom and Cloudflare IPs in csf.allow but they keep getting blocked due to mod_security (cPanel's new mod_sec rules are messy)
See the example.
root@server # csf -g 188.138.118.144
Chain num pkts bytes target prot opt in out...
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum