ConfigServer Community Forum

Gizzmo, Even if its stopped you shouldn't be using port 22, cpanel account Transfer work fine even if you have SSH running on non-standard port. TDE you should DENY any offending IP from Root WHM-->CSF--Deny IP Blocking them from cPanel will only block them on your domain, not on SSH and other servi...

Are you running ssh on default port (22, not recommended),

with so many failures i would certainly change the SSH port to a new one.

Upgraded 3 servers to latest CSF and all of them report Suspicious process when users are accessing email using squirrelmail . Time: Fri Jun 27 00:25:46 2008 PID: 20395 Account: dxxxnd Uptime: 161 seconds Executable: /usr/local/cpanel/3rdparty/bin/php-cgi Command Line (often faked in exploits): /usr...

lfd will ignore any ip's that you have listed in csf.ignore, any global ignore file is setup and any ip in /etc/relayhosts at the time if you have the RELAYHOSTS option enabled. thanks for the reply, iam not an expert but think this option is expecting any of IP in relayhost as trusted user. ignori...

upgraded to v3.01 and now the server doesn't mails the login alert, happening on 2 of my servers csf log shows:- Sun Jan 5 07:45:49 2008 lfd: *SSH login* from xx.xx.119.245 into the root account using password authentication - ignored nothing else has been changed on the server. on other boxes runni...

hi, I've few IP's of customer which are in the "allowed IP" List still i get the Lfd blocked notification mail for those failed logins as :- Failures: 8 (ftpd) Interval: 135 seconds Blocked: Yes Blocked: Yes confuses and needs to re-check it from csf menu. shouldn't this have something lik...

try Cron job Clean Mail Queue script

http://www.premierwebsitesolutions.com/scripts/mail/

thanx
pk

thanks sarah, I'll give this a try and let you know if problem persist.

Thanks for your excellent advice.

regards,
pk

hi, we have cs mailscanner thing running on our server but when ever a form is sent by email to our customers for feedback its getting renamed. check the form code below. <MAILSCANNERFORM6611 method="post" action="http://www.oursite.com/mailer-Dec/mailer-Dec.php" name="form1...

sir,
thanks for you kind attention i was just thinking why does php.ini still says "no value"

hoever http.conf does have
<IfModule mod_php4.c>
php_admin_value open_basedir "/home/pratap/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>

regards,
pk