ConfigServer Community Forum

This is not a bug, but it appears as though Fedora 11 has brought even more IPTables changes. I'm now seeing output like this when restarting CSF: Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`). ACCEPT udp opt -- in * out !lo 0.0.0.0/...

Hi, The entry for "PERMBLOCK" as listed in the CSF deny file could be a bit more verbose: XX.XX.84.26 # lfd: (PERMBLOCK) XX.XX.84.26 has had more than 4 temp blocks in the last 86400 secs - Thu May 7 14:55:43 2009 As a suggestion, could you possibly have it notate the reasons for the temp ...

Hi, I'm not sure if this is worth your time, but when running the 'csf -m' command on a Fedora 10 server, CSF inaccurately reports the OS as outdated. Since this is the latest version, you could add checks. That said, I'm not sure how many people run Fedora servers, and if it would be worth it to ad...

Thanks, Chirpy. Works great!

Heya Chirpy, Thanks for your continued work on this fabulous piece of software! We've received a number of reports today from clients whose CSF/LFD won't restart due to the following error: Error: iptables command [/sbin/iptables -v -I OUTPUT -p tcp --dport 25 -m owner --uid-owner 0 -j ACCEPT] faile...

Chirpy, We use your product on a large number of machines (cPanel, Plesk, no-cp, etc). I'm very happy with the 'Check Server Security' option from the CSF menu in cPanel. As a suggestion for the (distant) future, it would be cool to be able to pass the csf binary a flag and have it output the securi...

I will submit a support request right now. I'll need your IP to add it to TCPwrappers if you need SSH access. I do automatic upgrades, and am sure I was on 3.16 (generic) prior to doing a csf -u today (manual upgrade rather than waiting:)). Here is the diff: [root@claymore csf]# diff csf.conf.backup...

Hello, I just upgraded CSF from 3.16 to 3.17. Upon restarting CSF, a bunch of these errors were spammed: iptables v1.3.8: Unknown arg `-j' Try `iptables -h' or 'iptables --help' for more information. iptables v1.3.8: Unknown arg `-j' Try `iptables -h' or 'iptables --help' for more information. iptab...

Chirpy, Sorry for digging up an old thread. Thank you for your response. Are there any plans to add Dovecot to the services that LFD monitors? Dovecot is the only service that frequently gets dictionary attacked that LFD does not block. The failure line looks something like this by default on F7: Au...

Hello, Thank you very much for this product. We recommend it to all of our customers who request a powerful firewall that is simple to manage. I have two feature requests -- please correct me if they are already within the product. 1) Dovecot support. We typically set up our dedicated servers using ...