Hi, Is there a way to permanently set up an email to receive warnings about firewall attacks or problems that could endanger the system?
I'm new to ConfigServer firewall & security, so I need to share your experience.
Thanks!
# An alternative to CC_ALLOW is to only allow access from the following
# countries but still filter based on the port and packets rules. All other
# connections are dropped
OS: AlmaLinux 8.5 cPanel 102.0.14
also using it with Proxmox Virtual Environment 7.2.
Debian 11.3 Bullseye but using a newer Linux kernel 5.15.30,
QEMU 6.2, LXC 4
If I were to create an external include file for the csf.deny that listed the IP addresses, would I need to restart the csf service every time the external file was modified?
I would like to use a security detection script that monitors traffic on the website to write an IP to the external csf deny include file. I'd rather not get into execution permissions from a script if possible.
I'm trying to figure out a way to add ip addresses to the csf.deny list by means of a php script.
My first approach was to directly write to csf.deny from my php script. But figured that it was better to use usr/sbin/csf -d x.x.x.x because the ip is then directly blocked.
But the above is not working.
Tried with shell_exec and some other commands too.
I'm running CSF on Centos 7.9 and in all of my domains I can receive emails from gmail in my webmail. Although from other providers like yahoo, outlook or iCloud I can not. Can someone please explain to me how to fix this?
I've used WHM with CSF/LFD for many years and just recently made the switch to DirectAdmin.
I've got CSF/LFD installed but I'm having difficulty understanding how Brute Force Monitor and LFD work in DA.
In WHM, I would set LFD to block an IP after X unsuccessful logins or a distributed attack for which is receive an email notifying me. Pretty straight forward and worked very well.
I have been using csf+lfd under cpanel for ages without any problem (thanks cirpy for the great SW).
Port 2525 is one of my SMTP ports and csf.conf includes it in the following:
TCP_IN
SMTP_PORTS
My clients started calling me today that they cannot send mail. After checking the problem, I saw (telnet hostname 2525) that the 2525 port was blocked globally from outside. csf -x made...
Long standing server, firewall controlled by csf and working great. I am seeing something peculiar where I can run against my server and port 8020 it shows open but it is not listed in the csf.conf anywhere. lsof -i:8020 shows nothing attached to the port.
We were and still are fans of the Config-server firewall and use this firewall a lot. But recently we have been experiencing a lot of complaints of IP getting blocked from multiple sources and its frequency has been rising . On investigating the incident it was found that many IP's have been blacklisted on site maintaining the Spamhaus ZEN, RATS NoPtr, UCEPROTECTL3 and...
I keep receiving the following errors when trying to run CSF on my cPanel OpenVZ server.
# /etc/csf/csftest.pl
Testing ip_tables/iptable_filter...FAILED - Required for csf to function
Testing ipt_LOG...FAILED - Required for csf to function
Testing ipt_multiport/xt_multiport...FAILED - Required for csf to function
Testing ipt_REJECT...FAILED - Required for csf to function
Testing...
I'm using cPanel & WHM v102.0.8 (STANDARD) and CSF Firewall v14.16.
Today I changed some settings: SMTP_ALLOWUSER (added another user) and also added some ports to TCP_OUT list. Then I restarted the firewall and tested the new rules. Everything worked fine.
Some minutes later, the connections stopped working. Reviewed the configuration again and found that the changes I made were lost....
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum