Search found 4 matches
- 05 Feb 2017, 02:08
- Forum: General Discussion (csf)
- Topic: General question about csf at boot
- Replies: 2
- Views: 2773
Re: General question about csf at boot
Thank you! Indeed that sure sounds like it, as FASTSTART is "1" in this config. I won't bother changing it as I was just curious about this mode of operation and I really appreciate your taking a moment to answer! And yes, for non advanced users please don't flush your iptables rules as yo...
- 04 Feb 2017, 20:34
- Forum: General Discussion (csf)
- Topic: General question about csf at boot
- Replies: 2
- Views: 2773
General question about csf at boot
I flushed iptables with "iptables --flush" (don't do this if you don't know what it does!). Then I rebooted my system (Ubuntu 16.04). CSF started as expected, but I noticed the "flushed"/nonexistent firewall rules were still there after the reboot. I had to issue a csf -s in orde...
- 17 Apr 2015, 17:36
- Forum: General Discussion (csf)
- Topic: Enabling "DontResolve" in pure-ftpd
- Replies: 1
- Views: 2613
Enabling "DontResolve" in pure-ftpd
Just a quick note here; I noticed that while LFD was blocking some pure-ftpd bruteforce attempts, there were still times when my server was getting hammered repeatedly. Pure-ftpd logs in /var/log/messages, and the bruteforce attempts that were not being blocked looked like: Apr 13 23:41:32 brightsta...
- 27 Oct 2012, 16:32
- Forum: General Discussion (csf)
- Topic: Receiving ssh root login alerts with no ssh root login
- Replies: 3
- Views: 7563
Re: Receiving ssh root login alerts with no ssh root login
I don't know, but you really should not be allowing root to ssh in. You should have a different username (one that is slightly less brute-forceable) for SSH access, then you can su once you get to a console. It's called the wheel group technique. If root logins are disabled by SSH, then an attacker ...