Search found 3 matches
- 15 Mar 2025, 13:45
- Forum: General Discussion (csf)
- Topic: CSF & IPTables
- Replies: 0
- Views: 49472
CSF & IPTables
I have an AlmaLinux 8 server running CSF + LFD, using ipset for a larger corpus. Load looked very, very high, and I noted in the web server logs that IPs which were blocked in CSF were hammering some of my domains. So I did a systemctl status on iptables. It responded that iptables was "dead&qu...
- 09 Sep 2024, 18:01
- Forum: General Discussion (csf)
- Topic: Regex problem using one of the pre-defined lsws ones
- Replies: 1
- Views: 8023
Regex problem using one of the pre-defined lsws ones
I'm using this rule I pulled from the forum: # BLOCKING LiteSpeed attacks by Sergio if (($lgfile eq $config{CUSTOM4_LOG}) and ($line =~ /^\S+\s+\S+\s\[NOTICE\].*Failed Login Attempt \- username: (\S+) ip: (\S+)/i)) { return ("$1",$2,"SECMAS_LiteSpeed","1","1")...
- 07 Apr 2023, 17:36
- Forum: General Discussion (csf)
- Topic: Configuration question
- Replies: 1
- Views: 2001
Configuration question
Hi, I have CSF monitoring one of my files, and it's not picking up non-standard log lines generated by LiteSpeed. I have a ton of these: 2023-04-07 10:44:40.487175 [NOTICE] [12043] [T0] [[redacted]:39787-22#_AdminVHost:lsapi] [STDERR] [WebAdmin Console] Failed Login Attempt - username: admin ip: 185...