This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
I am running csf 4.16 (since 26/10/2008) and for no apparent reason lfd stopped logging the time in lfd.log starting November 1st, 2008. This is an exemple of the lines I now get:
Nov 2 servername lfd[31861]: *Port Scan* detected from xx.xxx.xxx.xxx hits in the last 235 seconds - *Blocked in csf* for 86400 secs
Nov 2 servername lfd[3954]: 5 (mod_security) login failures from xx.xxx.xxx.xxx in the last 300 secs - *Blocked in csf*
whereas the day before I was getting logs similar to:
Oct 31 10:52:37 servername lfd[20296]: *Port Scan* detected from xx.xxx.xxx.xxx hits in the last 120 seconds - *Blocked in csf* for 86400 secs
Oct 31 10:58:07 servername lfd[20525]: *Port Scan* detected from xx.xxx.xxx.xxx hits in the last 150 seconds - *Blocked in csf* for 86400 secs