ConfigServer Community Forum

I would like to know if I turn on Distributed SMTP Logins , but I have 3 IP addresses already whitelisted in the lfd.ignore area, if it gets triggered, would it ignore the whitelisted IP's for this check?

I just want to make sure before I turn it on.

After upgrading to WHM 11.36, I'm getting email alerts regarding excessive resource usage with Squirrelmail, for example:

Resource: Virtual Memory Size
Exceeded: 231 > 200 (MB)
Executable: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi
Command Line: /usr/local/cpanel/3rdparty/php/53/bin/php-cgi /usr/local/cpanel/base/3rdparty/squirrelmail/src/right_main.php

(in addition to right_main.php, we...

This morning I opened a ticket with our server provider because our server was down, and even though it would come back up after a reboot it would go down again within a few minutes. They claim this is because the server was under attack and running out of memory, I've provided their evidence below. I manually blocked the IP address in question in CSF immediately after rebooting the server again...

Getting the above on all configserver apps (since a recent whm/cpanel update)

ConfigServer Mail Manage
ConfigServer Mail Queues
ConfigServer Explorer
ConfigServer Security&Firewall
ConfigServer eXploit Scanner

cPanel 11.25.0-R42213 - WHM 11.25.0 - X 3.9

Hello, and thank you for building this tool that I completely love.

I've been experimenting with Port Knocking and it works perfectly, but just for opening one port server-wide.

Is there a way to define multiple ports to open or different sequences for different ports?

For example: I have a server that acts as a Webmin controller for other servers, and also as a SSH proxy to the same servers....

Hello,

i'm installing a script and it ask me to open port , just as in below :

Due to Facebook policy changing, you should open port 5222 on your Firewall to make Contact Importer work.

how can i do this please ?

wish you help me please kindly

thanks

Hi all,

I'm using a global deny list from Stop Forum Spam and am keen to use their Last 30 days list that is just under 129,000 IP's (quite a beast).

It would provide a good level of protection for me, but am I safe keeping my actual max deny IPs set to the last 100 (default) but having a hard coded list this large? Or will a list this large cause issues. I'm loading it from a .txt file every...

I'm getting this error message back from lfd.

SPAMHAUS: Unable to retrieve spamhaus block list - Unable to download: Bad Gateway

Is anyone getting the same message? If so, what to do about it ?

Thanks.

Pete

Please guide me how to close one or more ports of server by CSF?

Thanks.

How to make CSF react on additional lines in my secure log, such as:

Mar 19 13:28:49 host webmin : Invalid login as user1 from 1.1.1.100
Mar 19 13:34:12 host webmin : Non-existent login as test from 1.1.1.100

How could I block those who failed logging in to Webmin for more than 3 times?

Mar 19 13:35:11 host webmin : Successful login as root from 1.1.1.100
How to send an alert email for...

I am using a very minimal Debian Squeeze server. I don't have a mail server installed.

I've already installed sSMTP (wiki . debian . org/sSMTP) and was able to properly configure Gmail as the SMTP server.

My question is how can I use this so that CSF will use sSMTP when sending email alerts?

Hello, I am using command line only without cpanel.

My config says TESTING = 0 and i've restarted using: service lfd restart and csf -r but the last line says *WARNING* TESTING mode is enabled - do not forget to disable it in the configuration

Is this normal?

I'm using csf: v6.02 (generic) on Debian Squeeze

I just installed csf in my cpanel server. I got this error message while starting service. (I didn't modify any file)

Error: Error processing command for line (10 times): , at line 515

Also getting the following alert all the time

lfd failed @ Wed Nov 28 11:29:26 2012. A restart was attempted automagically.

I failed to start csf and lfd.

Please help me to resolve the problem.

We are running shoutcast server on a server.
Yesterday we moved this server, change nameservers etc. all is working fine except I keep getting messages about shoutcast like this:
Time: Fri Mar 22 14:16:52 2013 +0100
PID: 4379 (Parent PID:4379)
Account: admin
Uptime: 43310 seconds

Executable:

/home/admin/domains/mydomain.nl/public_html/shout/sc_serv

Command Line (often faked in exploits):...

Hi CSF,

I seemed to have lost SSH access to my server. My environment is CentOS 6.4 64-bit, DirectAdmin and ConfigServer Firewall. I have the SSH access port set to something non-standard. Every time I try to connect I receive the following error from kitty:

Server unexpectedly closed network connection

After the latest CSF update, it no longer wants to work. I checked the firewall settings...

I'm just curious what the memory requirements are for enabling the FASTSTART option ? I have a test VM running with 512 MB RAM. With the FASTSTART option enabled I see an exit code of 137 (google says that exit code is because of low memory). Note that there are around 500 permanent blocks in the csf.deny file.

# csf -r
Killed
# echo $?
137

With FASTSTART disabled I can have over 1000...

Hi,

First my english is not so good.
My OS: CentOs Linux with DirectAdmin and installed the latest version of csf v6.06

My problem...

I have a magento webshop and a payment system for my dutch customers, like paypal.
The website of this payment system is rabobank dot nl, when a customer order a product they will redirect to betalen.rabobank dot nl
The IP of this rabobank dot nl is...

error: Failed dependencies:
sendmail = 8.14.4-8.el6 is needed by (installed) sendmail-cf-8.14.4-8.el6.noarch
W Exit Code: 254
***** FATAL: Test install failed: error: Failed dependencies:
sendmail = 8.14.4-8.el6 is needed by (installed) sendmail-cf-8.14.4-8.el6.noarch
The Administrator will be notified to review this output when this script completes
***** FATAL: Error testing if the RPMs...

I have a VPS server with the latest versions of cPanel and CSF. The VPS hosts a few websites for myself and some friends, not random strangers, so there's a higher level of trust with anyone who has access, so I don't really have to worry about any users doing stupid or dangerous things on the server, but I suppose there's always a chance one of them has a security hole in a script they're using....

Simple dont work...
I try lock my IP and test but i dont receive the message.
I cant access the message in port 8888.

Any idea?
My conf:

MESSENGER =1
MESSENGER_TEMP = 1
MESSENGER_PERM = 1
MESSENGER_USER = csf
MESSENGER_CHILDREN = 30
MESSENGER_HTML = 8888
MESSENGER_HTML_IN = 80,2082,2095
MESSENGER_TEXT = 8889
MESSENGER_TEXT_IN =21,22
MESSENGER_RATE = 30/m
MESSENGER_BURST = 5

I create the user...