ConfigServer Community Forum

I keep seeing dozens, sometimes hundreds of class B or C IP's coming to the server with 1 connection with no real performance impact. I never let them stay connected long enough (or they don't) to dig deep into what they are actually doing (I need to thought). My question is, is there a setting in C...

P.S. Now, I'm scratching my head on this part of the CSF custom file Example: # if (($lgfile eq $config{CUSTOM1_LOG}) and ($line =~ /^\S+\s+\d+\s+\S+ \S+ pure-ftpd: \(\?\@(\d+\.\d+\.\d+\.\d+)\) \[WARNING\] Authentication failed for user/)) { # return ("Failed myftpmatch login from",$1,&quo...

Thanks!! This seems to do the trick

/\[file \"\/var\/cpanel\/cwaf\/rules\/09_Bruteforce_Bruteforce.conf\"\]/g

I know this is an old thread but, we're having the same issue now. We've been mitigating DDOS attacks and the attackers have moved to the Joomla admin login where Comodo WAF is catching this but, just returns a 403 after that still allowing the attacker to use up Apache resources. It would be great ...

Add your IP's to the csf.allow via the interface and you won't be blocked.

I had the same issue and it was a full /var issue. Old logs lying around. Caused a fantom issue for us.

I had this same question and this will help:

http://www-dot-centos-dot-org/docs/5/ht ... tasks.html

Replace the dot with real dots. The forums here didn't allow me to add a URL. Go figure...