ConfigServer Community Forum

Sorry to bring up an old thread, but I am having the same problem. I understand bandmin is not part of csf, but I was wondering if others have had this issue and found a solution that didn't involve simply setting LF_CPANEL_BANDMIN to 0? In my case bandmin is hanging for a little over 30 seconds dur...

This same issue just caused a bunch of havoc today. I think this is something that should be addressed just for the sake of making csf an even more robust product.

I agree with your conclusion that using SPAMDROP, ESPAMDROP, MAXMIND, DSHIELD and HONEYPOT are all that is needed. I decided to add in AUTOSHUN and BOGONS. With HONEYPOT you have to setup more than because the free RSS feeds just cover a small subset. Thanks again!

Terry, thanks for that amazing analysis. I just hope you are still around? I'd like to know if you are still using the same concepts and methodology today. I was thinking exactly what you were thinking and so that is how I found this post. I can't seem to be able to send you a PM so reply here. Than...

You are correct, I have not been receiving them. They are so large it is almost not useful. Maybe I should just set LOGSCANNER=0?

Thank you.

Both installations are set to...

LOGSCANNER=1
LOGSCANNER_INTERVAL=daily

...so I am unsure why it isn't clearing them.

I re-saved the config file without making any changes just in case.

I'll check in a couple of days to see if it clears automatically.

My /var/lib/csf/csf.logtemp is quite large on both servers where I have csf installed. By quite large I mean about 500 MBs. Is that normal? Can it be cleared? If so, what is the best way to clear it if something other than deleting it and restarting csf? I did trying restarting csf and lfd but it di...

Has this issue ever been resolved? It would be very nice to be able to log all blocked IP attempts and also keep Port Scan Tracking enabled. Is there a work around?

Thanks!

Just wondering if anybody has made any progress on automating the honeypot project list into csf. Their RSS feeds only seem to work if you are logged into their web site: http://www.projecthoneypot.org/list_of_ips.php?rss=1 So, you can't use something like Yahoo Pipes to manipulate the feed into a t...