ConfigServer Community Forum

Hi

We are receiving lfd on : Excessive resource usage: nagios emails from one of our servers every hour. Our CSF version is
csf v6.11

Content of email is:
Time: Sun Jun 2 01:00:38 2013 +0100
Account: nagios
Resource: Process Time
Exceeded: 42890 > 1800 (seconds)

Executable: /usr/sbin/nrpe
Command Line: /usr/sbin/nrpe -c /etc/nrpe.cfg -d
PID: 3247 (Parent PID:3247)
Killed: No

Can anyone...

Hello,

Anyone else have this problem? My CSF/LFD keeps banning my IP (usually from PopPeeper accessing mail too often), I try adding myself to the allow list, but my IP changes daily, or every time my connection is reset.

Any thoughts or suggestions on what I could do to keep myself unbanned?

Thanks sincerely in advance,

Edward Tate.

If I do csf -x and attempt to upload a file then it works, if I enable CSF then the upload drops. I'm sure I've missed a setting somewhere and would appreciate a point in the right direction.

I've diabled ICMP as that was causing issues but apart from that I can't think of anything else in the settings. I've been using CSF for years now and never seen this problem but have checked everything I...

Hello everyone, I set up CSF on my server that I plan on using to host a large Minecraft Server on.

I'm not sure of the best settings to use because I don't want it to start banning innocent IP addresses but still prevent attacks.

The Server will be holding ~100-150 people constantly, I am not using cPanel or any other web admin tool.

If anyone can recommend anything please reply back thanks.

Hi Chirpy and thanks as always for all that you do :)

I noticed these errors/warnings during a 6.09 to 6.10 upgrade...

...
...
mode of `/etc/csf/uninstall.sh' changed to 0700 (rwx------)
chmod: cannot access `/etc/csf/*.php': No such file or directory
failed to change mode of `/etc/csf/*.php' to 0000 (---------)
mode of `/etc/csf/webmin/csf/index.cgi' changed to 0700 (rwx------)
mode of...

what could be the format in the remote .txt file?
I just put ip in the .txt file like below:
1.2.3.4
3.3.2.1

Is it ok?

Hello,

I have searched about the file csf.dnscache but I am not sure what this file is having. I can see an entry similar to the following one.

--
# cat /etc/csf/csf.dnscache
206.169.86.130|206.169.86.130|206-169-86-130.static.twtelecom. net
67.182.18.58|67.182.18.58|c-67-182-18-58.hsd1. ca.comcast. net
93.97.146.248|93.97.146.248|93-97-146-248.zone5. bethere. co. uk...

I have a CentOS 5.8 server, with a game server on it. I have web hosting on a different server, and I'm trying to query the game server using PHP. It's sending a UDP request to the server, but it is being blocked. I turn off CSF and the request is successfully made. I had tried the following,

- Allow All Ports, Incoming and Outgoing TCP And UDP
- Put the incoming request's IP into my csf.allow...

I just noticed today, that after an update 6.06 the Webmin module stopped displaying View IP tables Log, the one that right under View lfd log.

I have latest CSF but this feature is important. Could you please fix it?

P.S. I'm running latest Webmin 1.630 on CentOS 6.4. By the way same was on 1.620!

Hi,

latest CSF, I've many emails like lfd on host: Suspicious process running under user xxx . This is nice feature but this send me many emails, so i try to turn off this but with no result:

PT_LIMIT = 0
PT_USERPROC = 0
PT_USERMEM = 0
PT_USERTIME = 0

csf -r

and nothing changes. still have info about my procceses. So i try add them to cf.pignore:

mail says: Executable:

/usr/bin/perl...

Guys,

I have a peculiar issue that's popped up since installing and configuring csf/lfd.

I do believe I've followed the instructions and config file directives properly, but maybe I've overlooked something obvious to you. :cool:

A little background.

CentOS 5.2-64. Opteron 1216. Physical host (not VPS or virtual guest OS). Generic csf/lfd install, I don't use any sort of control panel software...

Hello after update V6.07 CSF is no longer working under webmin.
I see only a empty field under webmin.
When i login with SSH CSF is working but its not posible to edit or change things with the webmin interface.

Hope someone have a solution for this?

Best regards:

Ron

Hi

I am using cpanel and cfs, I get every day:

Banned the following ip addresses on Mon May 13 07:06:01 CEST 2013

xxx.xx.xx.xx with 1242 connections

xxx is my VPS IP

I have white listed my IP but I am not sure whey I am getting this?

How to check it?

Hi,

MAC users are blocked in CSF. CSF is detecting these connections as port scanning. Please let us know whether this is a known issue.

We have bought CSX and not sure that is causing the issue.

Please help.

Hi

How can I block an entire ip range

195.122.131.0
to
195.122.131.255

?

Is it 195.122.131.0/24 ?

I am having trouble sending email from my server using CSF to a third party email provider.

I need to connect to the third party via port 587. I have confirmed that this port is added TCP_IN and TCP_OUT list (was there by default) saved and restarted but the connection times out.

If I disable CSF it can connect and send email without a problem.

What would cause this to be blocked even though...

Hi Guys,

I have CSF firewall redirect forwarding from cPanel server A (1.1.1.1) to cPanel server B (2.2.2.2). I have entered the following;

1.1.1.1|*|2.2.2.2|*|tcp

As I used a wildcard for the port number, I would have thought that 2086, 2087, etc would also be forwarded but they are not. I can still access cPanel ports on server A.

This is great and exactly what I need, otherwise it would...

Hi. I installed CSF and configured it to lock down my server. Everything seemed to be working fine (blocked ports were blocked, unblocked ports were unblocked, etc.). Testing mode is off. When I did a reboot, I was unable to access the server. After going in via the console, I could see that there was no network accessibility. No services could listen, ifconfig showed no IP addresses, I couldn't...

Dear,

My Log Scanner Report stopped working because?

Do not know where to settle, worked fine and suddenly stopped sending email to me.

How to solve this and what are the causes?

Thank you very much

Ferrarini

csf.config settings changed and csf restarted but still getting emails Excessive resource usage like below:
PT_USERMEM = 500 (was default 200MB)
PT_USERTIME = 5000

Email:
Account: psaadm
Resource: Virtual Memory Size
Exceeded: 216 > 200 (MB)
Executable: /usr/bin/sw-engine-cgi
Command Line: /usr/bin/sw-engine-cgi -c /usr/local/psa/admin/conf/php.ini -d auto_prepend_file=auth.php3 -u psaadm...