ConfigServer Community Forum

Yesterday I got CSF upgrade notifications from 2 servers:

Upgrading csf from v6.22 to 6.24........

Usually after upgrade comes an alert:

System Integrity checking detected a modified system file ... /usr/sbin/csf: FAILED

but not this time. Almost 24 hours are over but I didn't get any notification about modified sustem file. Is this OK?

Hello,

I constantly receive this e-mail for all my server every few days. Any ideas?

A new app has been registered with AppConfig.

Name: csf
Service: whostmgr
ACLS required: software-ConfigServer-csf
System User: root
URL(s): /cgi/configserver/csf.cgi
Display Name: ConfigServer Security& Firewall
Entry URL: configserver/csf.cgi

You can view all current registered apps here: Apps...

Hi all

Im using Csf for voip traffic
when CSf is enable i can not pass any call using media proxy if it pass no sound will heard while if i make call using Signaling proxy sound will hear well
if i disable Csf in media also i can hear voice

anyone can help me on this issue?

thanks in advance

I use CC_DENY on one country, for example TW (Taiwan), works, but I do TW,CN,RU,RO,NL,VN,KR
and it does not work at all. Help?

is there any way to block an IP, but only http traffic (port 80) and that other services work?

for example, from a certain IP, can not navigate but that the email does work?

how to do it by csf?

Hello,

From time to time I get emails reporting that some IP address was blocked for port scanning. That's very good but sometimes I discover that blocked IP address belong to a user of my website and I am sure this user do not scan ports of my server. Is it possible that some computers run port scans without knowledge of the owners?

Hi,

I think tonight has updated CSF for cPanel. The problem is now, Resellers can´t see the CSF fields to unblock or block Ip´s

There is any error on the update? I can see it all good on WHM root, but WHM resellers don´t Show CSF.

Thank you.

Is it possible for you to add a duration for a withe listing, next to the withe list option ? Example : a drop down list with 12, 24, 72 etc ...

Has anyone had any success getting EVault to work with SoftLayer? I have been going round and round trying to get this to work and every time csf is enabled, I cannot get my server to communicate with the backup program.

These are the ports that I have opened (with no sucess):
2546,2548,8086,8087,8021

Any help would be great!

Scott

Does anyone know for how long time CSF/LFD blocks IP address in case of 5 failed logins? Yesterday my IP address got blocked. 24 hours are over and I am still blocked.

How can I unblock my IP address when I access the server from another IP address?

Thanks.

I added the following port ranges to my CSF install and they don't work. Some people can't connect to the Ventrilo/TeamSpeak servers behind these port ranges 3000:4207,8767:8779. It's my understanding adding a port range allows all the ports withing that range to be opened so why am I having issues with people connecting? If I disable CSF players can connect with no issues. The Port ranges are...

Hello,
1.) i get here some errors to get following blocklists : Jul 13 07:18:47 bf2-gs lfd : Unable to retrieve blocklist MAXMIND - Unable to download: 599 - IO::Socket::SSL 1.42 must be installed for https support

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve blocklist HONEYPOT - Unable to download: 599 - Malformed Status-Line: HTTP/1.1 303\r\n

Jul 13 07:18:48 bf2-gs lfd : Unable to retrieve...

I get multiple copies of this email
Time: Sun Jul 14 05:12:23 2013 +0700
PID: 23073 (Parent PID:29765)
Account: apache
Uptime: 4220 seconds

Executable:

/usr/sbin/httpd

Command Line (often faked in exploits):

/usr/sbin/httpd

Network connections by the process (if any):

tcp: 0.0.0.0:80 -> 0.0.0.0:0

I have
cmd:/usr/sbin/httpd
exe:usr/sbin/httpd

in csf.pignore already, and restarted...

Hi,

I'm having issue with DNS replication using named . Basically, I configured named as slave DNS (IP: 192.168.1.3) to retrieve the zones from a master DNS (IP: 192.168.1.2). cfs is installed on the slave DNS (IP: 192.168.1.3).

When I execute named , the log indicates that the IP 192.168.1.2#53 is unreachable. If I stop csf on the slave DNS, then it replicates fine.

I tried adding the...

Hello!

Must we remove cPHulk Brute Force Detection before tar -xzf csf.tgz or can these two work together?

Thank You!

Zero

Hi there,

I am running the latest version of ConfigServer Firewall on Centos 6.
I have a TeamSpeak3 server running also on 185.13.225.90:9987.

In the configuration file i added all TCP and UDP ports used by TeamSpeak3.

Some people can connect with my server without a problem, others cannot connect and are getting a connection error.
After this, they are also not able to acces my website for...

I'm trying to hunt down the cause of this alert on a new centos setup (not cpanel)

I'm actually running percona mysql but it should be the same?

Looking at the source it looks like it must fail right off on the connection itself.

Note that .my.cnf DOES exist and csf has root as the login and blank password so it should use .mycnf

I don't see any other access errors, how can I debug if it's...

hello i have a problem with ip blocking csf is blocking all ips except for mine and i have to allow all of the 1 by 1 in csf Allow so they can enter my team speak server is there a way to allow all ip addreses to enter my servers without me having to manualy add them 1 by 1 :@

Hello,

i use code-google-com/p/franksworld/downloads/detail?name=unblockme-2.0.zip&can=2&q= and worl well,

but some of my servers can not work and they work with csf v6.21 now,

does anyone know if the new csf v6.21 has conflict with the unblockme-2.0 ?

thank you.

My clientsarewhensendingfiles to theFTPis being blocked byportscan..
blocked for port scanning While using FTP to send files
see below

lfd on domain: 187.65.106.56 (BR/Brazil/bb416a38.domain) blocked for port scanningTime: Thu Jan 5 19:03:09 2012 -0200
IP: 187.65.106.56 (BR/Brazil/bb416a38.domain)
Hits: 6
Blocked: Temporary Block

Sample of block hits:
Jan 5 19:02:30 srv kernel: Firewall:...