Search found 6 matches

by Progressed
18 May 2020, 13:44
Forum: General Discussion (csf)
Topic: unbanning temp banned ip doesnt unban in the cluster
Replies: 0
Views: 2537

unbanning temp banned ip doesnt unban in the cluster

The title says it all i think.

When i want to unban an IP in the temp list i need it to be unbanned when working in a clustered csf.

am i missing a setting or is it a bug?
by Progressed
08 May 2020, 15:10
Forum: General Discussion (csf)
Topic: Trying to find out why y regex is not working
Replies: 1
Views: 1734

Re: Trying to find out why y regex is not working

ffs... my mistake.

I took a line Authentication failure out of the log. Only thing is that i should have use Authentication attempt.

Isnt an attempt always a failure? Im goingn to check with the plugin maker.
by Progressed
08 May 2020, 14:48
Forum: General Discussion (csf)
Topic: Trying to find out why y regex is not working
Replies: 1
Views: 1734

Trying to find out why y regex is not working

Hi all, those regex's huh ;) according to several regextesters this should work: SSHD_LOG = /var/log/auth.log The regex: if (($globlogs{SSHD_LOG}{$lgfile}) and ($line =~ /^\S+\s+\d+\s+\S+ \S+ wordpress(\(.*)\).* Authentication failure for (.*) from (.*)/)) { $ip = $3; $website = $1; $user = $2; retu...
by Progressed
08 May 2020, 12:02
Forum: General Discussion (csf)
Topic: restrict_syslog not reverting
Replies: 2
Views: 2496

Re: restrict_syslog not reverting

Even though nothing has changed it did the trick! awesome!

I do advice it to put it somewhere in troubleshooting area or some sort.
by Progressed
08 May 2020, 10:13
Forum: General Discussion (csf)
Topic: restrict_syslog not reverting
Replies: 2
Views: 2496

restrict_syslog not reverting

Hi, I set the setting to 3 but found out some logs were not writing any more so wnted to do more research on which user needs the rights to write to LOG_AUTH (for example). So based on the docs reverting should be easy: If you want to revert RESTRICT_SYSLOG to another option and disable this feature...
by Progressed
20 Apr 2020, 22:46
Forum: General Discussion (csf)
Topic: Ip's are taken of blacklists
Replies: 0
Views: 4314

Ip's are taken of blacklists

Hi, Im banning a reasonably amount of IP's adding the blacklist URL's to lfd's blacklist function. for example: BLOCKLIST_DE_ALL|86400|0|https://lists.blocklist.de/lists/all.txt showing the amount of rows it tells me at this moment it has 33147 rows (of which only 6 ipv6 adresses) yet an ipset list ...