Search found 14 matches

by ZeroNine
27 Jan 2025, 14:28
Forum: General Discussion (cxs)
Topic: Permissions of CXS files changes by accident
Replies: 1
Views: 100565

Permissions of CXS files changes by accident

This is very embarrassing. I accidentally ran find /* -type f -print0 | xargs -0 chmod 0644 and all my server files changed to 644. I was able to restore pretty much everything so everything is fine now. But I'm getting this permissions error with CXS. What are the permissions that should be reset t...
by ZeroNine
23 Jul 2018, 17:25
Forum: General Discussion (cxs)
Topic: The service “cxswatch” appears to be down.
Replies: 2
Views: 8176

The service “cxswatch” appears to be down.

I started getting this "FAILED ⛔: cxswatch" email last night and has been sending non stop for the last 5 hours. I looked into upgrading CXS from cxs: v9.15 to v9.16 but when I try through WHM, I am getting Modification of non-creatable array value attempted, subscript -1 at /usr/sbin/cxs ...
by ZeroNine
09 Apr 2017, 19:10
Forum: General Discussion (csf)
Topic: Excessive resource usage: rpcuser
Replies: 1
Views: 3552

Re: Excessive resource usage: rpcuser

I forgot to mention I am also receiving this email now along with the previous:
Suspicious process running under user rpcuser

Executable:

/usr/sbin/rpc.statd


Command Line (often faked in exploits):

/usr/sbin/rpc.statd --no-notify
by ZeroNine
09 Apr 2017, 19:08
Forum: General Discussion (csf)
Topic: Excessive resource usage: rpcuser
Replies: 1
Views: 3552

Excessive resource usage: rpcuser

Hi, I been running my server without any issues for over a year now. Starting a couple days ago I started receiving this: Excessive resource usage: rpcuser every hour out of no where. I understand I can add this to the ignore list but I just wanted to see if anybody knows if this is some kind of hac...
by ZeroNine
12 Oct 2015, 23:54
Forum: General Discussion (cxs)
Topic: Form Submission
Replies: 4
Views: 7502

Re: Form Submission

Ok I figured out the issue. It had to do with Mod Security and the rules set.
by ZeroNine
12 Oct 2015, 22:40
Forum: General Discussion (cxs)
Topic: Form Submission
Replies: 4
Views: 7502

Re: Form Submission

This is getting even more strange now. I stopped cxs watch so now it shows "cxs Watch Daemon - cxs Watch is not running". and the site is still redirecting to home page. Is there anything else I can do to test to see if CXS is the cause and if I can test be disabling it quickly to figure o...
by ZeroNine
12 Oct 2015, 22:10
Forum: General Discussion (cxs)
Topic: Form Submission
Replies: 4
Views: 7502

Re: Form Submission

Ok I just read Dealing with false=positives in cxs I created the cxs.ignore file. Should I add the php file that is processing the form as an ignore script? Do I need to add the absolute path to the php script? Do I have to do that with each of the php files that are on the site? If I add a user or ...
by ZeroNine
12 Oct 2015, 22:00
Forum: General Discussion (cxs)
Topic: Form Submission
Replies: 4
Views: 7502

Form Submission

Hi, I recently installed CXS installed on my server. I now have some unusual issues that I am trying to figure out if it is tied to CXS and if so, how I can make things work again. On one of the websites I have a post form that I will be inputting into a textarea field XML data for processing. For s...
by ZeroNine
17 Apr 2013, 09:00
Forum: General Discussion (csf)
Topic: CSF Possibly Blocking Gmail
Replies: 23
Views: 40309

Re: CSF Possibly Blocking Gmail

Thank you Sergio!!
Everything is fine now.
I didn't want to reply too fast because I had to be sure it was working properly. ;)