ConfigServer Community Forum

scrupul0us

As indicated:
https://access.redhat.com/solutions/6739041

Is there any guidance or roadmap from CSF on --gulp-- firewalld, or other, as RHEL seems to indicate these may be dropped in the next version.

Thank you.

scrupul0us

Currently connection tracking blocks all ports even if you have CT_PORTS defined.

Similar to LF_SELECT, it would be great to have an option to only block defined CT_PORTS.

Thank you.

scrupul0us

I have CSF setup to only block IP access to service ports for which a block occurs. When running csf -t, I see an entry for each service port that has been blocked, however, the port column shows an aggregate of the ports being blocked. For instance: [~] csf -g xxx.68.22.155 Table Chain num pkts byt...

scrupul0us

Thank you

scrupul0us

Advisement from MaxMind sent out today: MaxMind will begin requiring HTTPS for GeoIP download requests in March 2024. To help customers get ready for this change, we will have a planned, temporary enforcement of this policy on October 17, 2023. Could the devs kindly advise if CSF is interacting with...

scrupul0us

Are you using the "BFLP plugin" inside Wordpress? I believe that is what is managing this section in your .htaccess.

You should be able to manage the number of failed attempts required within the plugin settings.

scrupul0us

For CSF messenger, the index.php file that handles unblocking, uses curly braces for array indexes/offsets and throws: Array and string offset access syntax with curly braces is deprecated. For example: $lang{"warning"}; Should be $lang["warning"]; -PHP: PHP 7.4.12 -OS: CentOS Li...

scrupul0us

You want:

Code: Select all

SMTPAUTH_LOG = "/var/log/exim_mainlog"
SMTPRELAY_LOG = "/var/log/exim_mainlog"
SCRIPT_LOG = "/var/log/exim_mainlog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"

...based on CentOS 7 w/cPanel

scrupul0us

This would be very easy to implement:

In csf.conf create a new option:

Code: Select all

LF_TEMP_EMAIL_ALERT = "1"

Then in lfd.pl alter the conditional on line 2520 to:

Code: Select all

if ($config{LF_EMAIL_ALERT} && ($perm || (!$perm && $config{LF_TEMP_EMAIL_ALERT})))

scrupul0us

Got my vote, this would be very useful to keep the "noise" down.

ConfigServer Community Forum

Search found 11 matches

IPTABLES, IPSET Deprecated

Connection Tracking option to block only CT_PORTS

csf -t shows duplicate entries but ports are already aggregated

Re: MaxMind to require HTTPS March 2024

MaxMind to require HTTPS March 2024

Re: CSF blocks ip with 2 login failure in wordpress

CSF Messenger PHP deprecation warnings

Re: LFD isn't blocking dovecot login failures

Re: LF_TEMPBLOCK_ALERT option

Re: LF_TEMPBLOCK_ALERT option