ConfigServer Community Forum

Sarah, What command could I implement in CXS.IGNORE for it to not check files with no content (zero lenght), I mean the file is empty with no code. In my logs I see a lot of: cxswatch[2283]: WARNING: '.../index.html' scanned 6 times in the last 30 seconds, you might want to ignore this resource I ha...

Have you tried the "Learn as Ham" under MailControl?

Sergio

Check cxs Command Wizard under CXS configuration, in there you can change that option.

Sergio

Hi.
Try https://regex101.com to test your rules.

Sergio

Hi. I created an MD5SUM for index.html file and add it to cxs.ignore but CXS continues to show: WARNING: '.../public_html/wp-content/uploads/ast-block-templates-json/index.html' scanned 6 times in the last 30 seconds, you might want to ignore this resource I don't want to ignore the route nor the fi...

To fix this, do the following: - check where is located %rules-dir%/virus.scanning.rules Once in that folder edit virus.scanning.rules and add the email address that you don't want to be checked by viruses, per example: From: 127.0.0.1 and From: postmaster@server.domain.com no # postmaster That will...

If you want to fix that, do the following:
a) Enter into ConfigServer MailContro FE.
b) In there click on "FORCE REQUEUE (Checks for incorrectly queued emails, fixes the queued files and forces an exim queue run).

That will help to clean the CMQ.

Regards,
Sergio

The "Hourly Log Scanner Report" is not delivered and is blocked because MailScanner flagged this report with virus: Clamd: msg-691013-207.txt was infected: YARA.r57shell_php_php.UNOFFICIAL Clamd: message was infected: YARA.r57shell_php_php.UNOFFICIAL Where I can do a check of this file msg...

You can see the name of the list if you search the IP at CSF tool, "Search for IP".

If blocked, it will output the occurrence, ie:

IPSET: Set:bl_PHISHIPS Match:14.154.94.125 Setting:PHISHIPS file:/etc/csf/csf.blocklists

Showing the block list name that blocked the IP.

Sergio

Try the following in /usr/local/cpanel/whostmgr/docroot/cgi/configserver/ Directories should be: 755 CGI Files should be: 700 SSH Files should be: 700 pretty much all other files like .png, .txt, etc. should be 644 Or what it will be better is to ask Configserver how much they charge for fixing this...