LF_DIST_ACTION not triggering
Posted: 08 Jul 2021, 13:28
Hello,
I've created a bash script which should be triggered by LF_DIST_ACTION but doesn't appear to be. I've set the execute bit and csf.conf appears to be set OK.
If I call the script directly over the command line seems to work fine. It sends me a Pushbullet alert, which is how I know if it has or has not executed.
I'm tailing the lfd.log and I can see plenty of entries where the script should be triggered. For example...
But the script doesn't seem to execute. I've set this up on 10 different servers but the result is the same. I'm really scratching my head on this one. Does anyone have any ideas? I notice there's a debug mode in CSF/LFD. Would enabling this give me some more information on what's happening?
Many thanks,
Will
I've created a bash script which should be triggered by LF_DIST_ACTION but doesn't appear to be. I've set the execute bit and csf.conf appears to be set OK.
Code: Select all
root@server [~]# grep ^LF_DIST_ACTION /etc/csf/csf.conf
LF_DIST_ACTION = "/root/LF_DIST_ACTION.sh"I'm tailing the lfd.log and I can see plenty of entries where the script should be triggered. For example...
Code: Select all
10 distributed smtpauth attacks on account [xxxx@xxxx.com] in the last 3600 secs - *Blocked in csf* [LF_DISTATTACK]Many thanks,
Will