ConfigServer Community Forum

Hi all,

I'm using a global deny list from Stop Forum Spam and am keen to use their Last 30 days list that is just under 129,000 IP's (quite a beast).

It would provide a good level of protection for me, but am I safe keeping my actual max deny IPs set to the last 100 (default) but having a hard coded list this large? Or will a list this large cause issues. I'm loading it from a .txt file every...

I'm getting this error message back from lfd.

SPAMHAUS: Unable to retrieve spamhaus block list - Unable to download: Bad Gateway

Is anyone getting the same message? If so, what to do about it ?

Thanks.

Pete

Please guide me how to close one or more ports of server by CSF?

Thanks.

How to make CSF react on additional lines in my secure log, such as:

Mar 19 13:28:49 host webmin : Invalid login as user1 from 1.1.1.100
Mar 19 13:34:12 host webmin : Non-existent login as test from 1.1.1.100

How could I block those who failed logging in to Webmin for more than 3 times?

Mar 19 13:35:11 host webmin : Successful login as root from 1.1.1.100
How to send an alert email for...

I am using a very minimal Debian Squeeze server. I don't have a mail server installed.

I've already installed sSMTP (wiki . debian . org/sSMTP) and was able to properly configure Gmail as the SMTP server.

My question is how can I use this so that CSF will use sSMTP when sending email alerts?

Hello, I am using command line only without cpanel.

My config says TESTING = 0 and i've restarted using: service lfd restart and csf -r but the last line says *WARNING* TESTING mode is enabled - do not forget to disable it in the configuration

Is this normal?

I'm using csf: v6.02 (generic) on Debian Squeeze

I just installed csf in my cpanel server. I got this error message while starting service. (I didn't modify any file)

Error: Error processing command for line (10 times): , at line 515

Also getting the following alert all the time

lfd failed @ Wed Nov 28 11:29:26 2012. A restart was attempted automagically.

I failed to start csf and lfd.

Please help me to resolve the problem.

We are running shoutcast server on a server.
Yesterday we moved this server, change nameservers etc. all is working fine except I keep getting messages about shoutcast like this:
Time: Fri Mar 22 14:16:52 2013 +0100
PID: 4379 (Parent PID:4379)
Account: admin
Uptime: 43310 seconds

Executable:

/home/admin/domains/mydomain.nl/public_html/shout/sc_serv

Command Line (often faked in exploits):...

Hi CSF,

I seemed to have lost SSH access to my server. My environment is CentOS 6.4 64-bit, DirectAdmin and ConfigServer Firewall. I have the SSH access port set to something non-standard. Every time I try to connect I receive the following error from kitty:

Server unexpectedly closed network connection

After the latest CSF update, it no longer wants to work. I checked the firewall settings...

I'm just curious what the memory requirements are for enabling the FASTSTART option ? I have a test VM running with 512 MB RAM. With the FASTSTART option enabled I see an exit code of 137 (google says that exit code is because of low memory). Note that there are around 500 permanent blocks in the csf.deny file.

# csf -r
Killed
# echo $?
137

With FASTSTART disabled I can have over 1000...

Hi,

First my english is not so good.
My OS: CentOs Linux with DirectAdmin and installed the latest version of csf v6.06

My problem...

I have a magento webshop and a payment system for my dutch customers, like paypal.
The website of this payment system is rabobank dot nl, when a customer order a product they will redirect to betalen.rabobank dot nl
The IP of this rabobank dot nl is...

error: Failed dependencies:
sendmail = 8.14.4-8.el6 is needed by (installed) sendmail-cf-8.14.4-8.el6.noarch
W Exit Code: 254
***** FATAL: Test install failed: error: Failed dependencies:
sendmail = 8.14.4-8.el6 is needed by (installed) sendmail-cf-8.14.4-8.el6.noarch
The Administrator will be notified to review this output when this script completes
***** FATAL: Error testing if the RPMs...

I have a VPS server with the latest versions of cPanel and CSF. The VPS hosts a few websites for myself and some friends, not random strangers, so there's a higher level of trust with anyone who has access, so I don't really have to worry about any users doing stupid or dangerous things on the server, but I suppose there's always a chance one of them has a security hole in a script they're using....

Simple dont work...
I try lock my IP and test but i dont receive the message.
I cant access the message in port 8888.

Any idea?
My conf:

MESSENGER =1
MESSENGER_TEMP = 1
MESSENGER_PERM = 1
MESSENGER_USER = csf
MESSENGER_CHILDREN = 30
MESSENGER_HTML = 8888
MESSENGER_HTML_IN = 80,2082,2095
MESSENGER_TEXT = 8889
MESSENGER_TEXT_IN =21,22
MESSENGER_RATE = 30/m
MESSENGER_BURST = 5

I create the user...

Hi,

I have spent few hours until now trying to solve my problem but without success.
I'm not sure when, but I suppose it started since 12.3.2013.
My clients can't connect to FTP. If I disable csf everithing works fine.
I checked config and TCP_IN/TCP_OUT for IPv4
Open ports are: 20,21,22,25,53,80,110,143,443,465,587,993,995,2077,2078,2082,2083,2086,2087,2095,2096,3306,30000:35000
and I use...

I've seen some minor discussion about CloudFlare here on these forums, but haven't really seen any working solutions, especially for what I'm trying to do. Right now, I'm having two issues with the setup between CSF and CloudFlare.

The first issue is, we use csf.allow to whitelist for non-standard ports (WHM/cPanel, FTP, SSH, etc.), but with CloudFlare, we end up having to whitelist those IP's...

Should LFD be blocking DEFERRED LOGIN attempts in /usr/local/cpanel/logs/login_log ?

We recently had a situation where a large number of these entries were being logged and it was raising the server load on the server. However, LFD wasn't blocking them, and looking through the code, I don't guess it is suppose to.

Is this something was overlooked in LFD's development or is it not suppose to...

I am failing PCI because my database port is open. Thing is its not, its blocked by CSF. But in order for the PCI scans to run OK and do their checks I have to add them to the IP allow list. So THEY can see the port open, even though no one else can, and fail us!

So therefore I would like to know if its possible to keep them (and other IPs) in the allow list, but still block the database port...

LogScanner was emailing me every hour and I like to look over what it reports, but it was too many emails, so I edited the config file and set the option to daily .

Since then I have not received a single email from it.

Is this common?

Hi there,
I just installed csf and I use SSH dynamic port forwarding. I use obfuscated ssh ( com/obfuscated-openssh) for a secret handshake wich is in /opt/ob-openssh/sbin/sshd . I connect from my computer to my VPS (which csf in installed on) with:
$ ssh -D -z -Z -p
to make a socks connetion on my computer localhost: . but when I enable csf, no connection would be established. The browser will...