ConfigServer Community Forum

Where do I find the option to change for this?

Folks, I have csf/lfd installed (no cpanel) and I'm having a hard time getting my game server to work.

It uses ports 10777,11777,9000,9010,7777,7778,7787,28902`

After trying to get all the ports in the right spots, just to get it going I added all of them to the TCP_OUT,UDP_IN and UDP_OUT sections of the csf.conf and it didn't work.

The closest I got was when I added the shell script that...

Hello,

How do I block access to port 25 for all IP addresses and allop only my hosted mail filter access to port 25 for mail delivery?

I tried to add this to the deny rules:

tcp|in|d=25|s=all

then added the the mail filters IP range to the allow rules. I tried to test using mxtoolbox but they are able to connect and get a 220 and 250 session transcript. I was under the impression that this...

I get alot email tell me this

lfd on server.hostname: Excessive resource usage: user (26145 (Parent PID:26134))

how i can disable this alert

Hello,

What happened to these localhostrelay settings? they were very helpful. I checked the changelog and there is no mention of their removal.

Good day and let me first apologize if I am posting in the wrong area.

I receive 70-80 alerts from lfd..is there a way to shorten the list?

Don

First of all, I'd like to say I am most impressed with the work done on CSF, it's leaps and bounds ahead of manually editing iptables at the command prompt. Especially for someone who isn't very strong in linux. With that said..

We have a new server build of Ubuntu 10 LTS, which originally came with a DirectAdmin control panel. DA had huge issues in getting along with Webmin, so the ISP rebuilt...

As the title says, we have CSF running and successfully blocking IPs from .htaccess based login failures. We are running nginx, but we have updated the log file locations to our nginx logs and CSF is working great. IPs are auto added to csf.deny after several failed login attempts.

Our problem arises in that users can still load up the website even after their IP has been blocked. They are...

I keep noticing that the iptables service isnt running - it seems like since I installed CSF - just from a timeline perspective. Is there something I might have done wrong to cause this?

Thanks

Csf function connection limit per ip is not working and conflict with nginx. Kindly help me...

Hi!

I found for make a graph with fail2ban stats. Works fine

Now, I addapt this for CSF, so, I am sharing with you

1 - Script

Save as you want

#!/bin/bash

PROGNAME=csf
STATEDIR=/var/lib/munin/plugin-state

CHAINLIST=$(iptables -L -n |grep Chain|awk {'print $2'})

if
then
echo 'system.type ABSOLUTE'
echo 'graph_title CSF'
echo 'graph_vlabel Number of ban'
echo 'graph_category...

smarty compiled cache files are tossing a ton of warnings for suspicious files

subject for email is: lfd on vulcan.xxxxxxxxhosting.com: Suspicious File Alert

Time: Wed Jan 14 22:28:45 2015 -0700
File: /tmp/%%0E^0E4^0E407559%%footer.tpl.php
Reason: Script, file extension
Owner: xxxx:xxxx (512:524)
Action: No action taken

how and what do i edit to disable the flag for tpl.php files ?...

Hi,

is there a way to ban users who are trying to bruteforce drupal / wordpress or other cms installations. For fail2ban you have options but does csf has options to counter this?

Hello,
i added following lines in /etc/csf/csf.pignore:

exe:/usr/local/lsws/fcgi-bin/lsphp-5.4.34

and restarted csf but i still receive email like this:

Time: Fri Oct 24 08:40:34 2014 +0200
PID: 591387 (Parent PID:591387)
Account: xxxxxxx
Uptime: 11623 seconds

Executable:

/usr/local/lsws/fcgi-bin/lsphp-5.4.34

Command Line (often faked in exploits):...

I just installed this firewall
Its awesome
I have a VPS
I have several websites each with its own IP on this server
Does one installation cover my entire VPS or do I have to enable shell and install on each domain?

hi,
i was able to limit concurrent connection per IP.
but this might cause problem and effect good traffic.

the problem i am facing is, when a client is requesting a page through GET, it's served from the cache, there is no PHP code involved. so i don't care even if i am even brute forced with this method.
but if the same page is requested with POST (regardless good or bad traffic), it's always...

My 15 days old server receiving port scanning attack almost every hour. I configured CSF and its doing great job in blocking those port scanning attack and sending me an alert email with the details.

Wondering if there is a way I can completely disable the port scanning feature on my dedicated server with help of csf......?

Below are few sample of blocked alerts

Time: Fri Jan 2 16:17:00 2015...

I've mostly gotten rid of excessive resource usage alerts by adding to csf.pignore. However, there are two processes left that I can't nail down: /usr/sbin/nginx and /usr/sbin/mysqld

I have exe:/usr/sbin/nginx and exe:/usr/sbin/mysqld lines in csf.pignore and csf has been restarted, but I'm still receiving alert emails about process time and suspicious processes.

Can anyone explain why ignoring...

Can anyone help me determine what causes a process called lfd - (child) Statistic to be spawned? We had a server go into high load today and there were over 800 of these processes. I'm not seeing anything obvious in the logs so I'd like more to go on. What causes the lfd - (child) Statistic process?

Thanks in advance,
Bob