ConfigServer Community Forum

Im having the same issue. Ive done csf -r and service lfd restart. No difference.

Yes, this is very frustrating and causing tons of problems for us.

Why not? They both simply just manage config files. I like cpanels mod_sec logging better and its vendor process and and autoupdating, but they have no user users management, which cmc is good for.

probably not. Have you considered turning off the mail function for php for their account? That could help things. Also, if they are continually getting hacked, its probably their third party modules or themes that they are using. Are you using well maintained mod_sec rules as well? Lastly, are you ...

Thanks for the reply and info marcele. So you are saying that modsec is just giving warnings about the hack attempt and isnt even actually denying them? Thus LFD doesnt doesnt track the attempts?

I am seeing the same ip showing up in my httpd error_log for numerous mod_sec violations, yet its not being blocked by CSF. I have CSF set to block after 5 errors and it is watching the correct error_log path. [Thu Dec 18 10:21:12.222145 2014] [:error] [pid 23305] [client 94.102.49.241] ModSecurity:...

Any suggestions then? Should I just use csf.ignore?

Is there a way for me to ignore the ip or hostnames of our incoming anti-spam systems in LFD? I am getting relay alerts from LFD. I dont want to completely whitelist the ip from all checks, just these relay checks.

After uninstalling the Mailscanner Frontend and all of its components (I followed its uninstall docs), exim will no longer verified recipients. Even though I have all my default addressses setup to :fail: and I have verified that exim.conf still has require verify = recipients, its still accepting e...

Why would i need port 25 open for incoming connections? Im not accepting incoming smtp connections except from anti spam gateway. LOL, UDP is definitely not involved here, at least not on 25.