I reinstalled CFS from scratch following the guidelines, but after lfd starts it stops straight away... I can see the following in the error logs...
Code: Select all
root@host [~]# tail -f /var/log/lfd.log
Aug 30 20:56:37 host lfd[22089]: Email Relay Tracking...
Aug 30 20:56:37 host lfd[22089]: System Statistics...
Aug 30 20:56:37 host lfd[22089]: Connection Tracking...
Aug 30 20:56:37 host lfd[22089]: Process Tracking...
Aug 30 20:56:37 host lfd[22089]: Account Tracking...
Aug 30 20:56:37 host lfd[22089]: SSH Tracking...
Aug 30 20:56:37 host lfd[22089]: SU Tracking...
Aug 30 20:56:37 host lfd[22089]: WHM Tracking...
Aug 30 20:56:37 host lfd[22089]: *Error* pid mismatch or missing, at line 844
Aug 30 20:56:37 host lfd[22089]: daemon stopped
Running the tests came back fine:
Code: Select all
root@host [~]# perl /usr/local/csf/bin/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK
Testing iptable_nat/ipt_DNAT...OK
RESULT: csf should function on this server
If I run csf -r I get a failure too:
Code: Select all
root@host [~]# csf -r
Flushing chain `INPUT'
Flushing chain `FORWARD'
Flushing chain `OUTPUT'
Flushing chain `PREROUTING'
Flushing chain `POSTROUTING'
Flushing chain `OUTPUT'
open3: exec of /sbin/ifconfig failed at /usr/sbin/csf line 2783.
Code: Select all
Aug 30 22:10:40 host lfd[4790]: open3: exec of /sbin/ifconfig failed at /usr/sbin/lfd line 6316.
Aug 30 22:10:40 host lfd[4790]: daemon stopped
Aug 30 22:10:40 host lfd[4789]: daemon started on host.digitalflare.co.uk - csf v8.04 (cPanel)
Aug 30 22:10:40 host lfd[4789]: CSF Tracking...
Aug 30 22:10:40 host lfd[4789]: iptables appears to have been flushed - running *csf startup*...
Aug 30 22:10:41 host lfd[4789]: csf startup completed
Aug 30 22:10:41 host lfd[4789]: LOAD Tracking...
Aug 30 22:10:41 host lfd[4789]: Country Code Lookups...
Aug 30 22:10:41 host lfd[4789]: System Integrity Tracking...
Aug 30 22:10:41 host lfd[4802]: CCL: Retrieving GeoLite Country database [http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz]
Aug 30 22:10:41 host lfd[4789]: Exploit Tracking...
Aug 30 22:10:41 host lfd[4789]: Directory Watching...
Aug 30 22:10:41 host lfd[4789]: Email Queue Tracking...
Aug 30 22:10:41 host lfd[4789]: Email Relay Tracking...
Aug 30 22:10:41 host lfd[4789]: Temp to Perm Block Tracking...
Aug 30 22:10:41 host lfd[4789]: System Statistics...
Aug 30 22:10:41 host lfd[4789]: Process Tracking...
Aug 30 22:10:41 host lfd[4789]: Account Tracking...
Aug 30 22:10:41 host lfd[4789]: SSH Tracking...
Aug 30 22:10:41 host lfd[4789]: Webmin Tracking...
Aug 30 22:10:41 host lfd[4789]: SU Tracking...
Aug 30 22:10:41 host lfd[4789]: Console Tracking...
Aug 30 22:10:41 host lfd[4789]: WHM Tracking...
Aug 30 22:10:41 host lfd[4789]: *Error* pid mismatch or missing, at line 844
Aug 30 22:10:41 host lfd[4789]: daemon stopped