Page 1 of 1

lfd stopped logging time

Posted: 06 Nov 2008, 14:13
by sebby
Hi,

I am running csf 4.16 (since 26/10/2008) and for no apparent reason lfd stopped logging the time in lfd.log starting November 1st, 2008. This is an exemple of the lines I now get:

Code: Select all

Nov  2 servername lfd[31861]: *Port Scan* detected from xx.xxx.xxx.xxx hits in the last 235 seconds - *Blocked in csf* for 86400 secs
Nov  2 servername lfd[3954]: 5 (mod_security) login failures from xx.xxx.xxx.xxx in the last 300 secs - *Blocked in csf*
whereas the day before I was getting logs similar to:

Code: Select all

Oct 31 10:52:37 servername lfd[20296]: *Port Scan* detected from xx.xxx.xxx.xxx  hits in the last 120 seconds - *Blocked in csf* for 86400 secs 
Oct 31 10:58:07 servername lfd[20525]: *Port Scan* detected from xx.xxx.xxx.xxx  hits in the last 150 seconds - *Blocked in csf* for 86400 secs
Any idea what might be causing that?

Running CentOS 5.2

Posted: 06 Nov 2008, 15:31
by Sarah
This was fixed in version 4.20.

Posted: 06 Nov 2008, 16:22
by sebby
Should have read the changelog more carefully. Will upgrade. Thank you Sarah!