Search found 4 matches

by haus
05 Feb 2017, 02:08
Forum: General Discussion (csf)
Topic: General question about csf at boot
Replies: 2
Views: 2773

Re: General question about csf at boot

Thank you! Indeed that sure sounds like it, as FASTSTART is "1" in this config. I won't bother changing it as I was just curious about this mode of operation and I really appreciate your taking a moment to answer! And yes, for non advanced users please don't flush your iptables rules as yo...
by haus
04 Feb 2017, 20:34
Forum: General Discussion (csf)
Topic: General question about csf at boot
Replies: 2
Views: 2773

General question about csf at boot

I flushed iptables with "iptables --flush" (don't do this if you don't know what it does!). Then I rebooted my system (Ubuntu 16.04). CSF started as expected, but I noticed the "flushed"/nonexistent firewall rules were still there after the reboot. I had to issue a csf -s in orde...
by haus
17 Apr 2015, 17:36
Forum: General Discussion (csf)
Topic: Enabling "DontResolve" in pure-ftpd
Replies: 1
Views: 2613

Enabling "DontResolve" in pure-ftpd

Just a quick note here; I noticed that while LFD was blocking some pure-ftpd bruteforce attempts, there were still times when my server was getting hammered repeatedly. Pure-ftpd logs in /var/log/messages, and the bruteforce attempts that were not being blocked looked like: Apr 13 23:41:32 brightsta...
by haus
27 Oct 2012, 16:32
Forum: General Discussion (csf)
Topic: Receiving ssh root login alerts with no ssh root login
Replies: 3
Views: 7563

Re: Receiving ssh root login alerts with no ssh root login

I don't know, but you really should not be allowing root to ssh in. You should have a different username (one that is slightly less brute-forceable) for SSH access, then you can su once you get to a console. It's called the wheel group technique. If root logins are disabled by SSH, then an attacker ...