Check Server Security options not updating
Posted: 21 Feb 2014, 14:59
Hello. I have installed CSF on a WHM 11.38.2 (build 3) server.
I am making some adjustments to server settings based on the reocmmendations in the "Check Server Security" options.
I've made quite a few adjustments and rescanned each time and mysecurity rating increases each time as expected.
However there are 2 options that I think I've made the suggested changes properly, but when I recheck server security CSF still informs me I need to make those changes. The options are:
Check for DNS random query source port
and
Check SSH UseDNS
For "Check for DNS random query source port" I commented out the query-source line in all the named related files in /etc. I have restarted te named service recanned CSF server security and it still says I need to make that change.
For "Check SSH UseDNS" I edited the /etc/ssh/sshd_config file and added the "UseDNS no" option. I restarted sshd and rescanned CSF security. It also shows I still need to make that change.
Has anyone else seen thios issue or have any suggestions regarding something I may have missed?
I am making some adjustments to server settings based on the reocmmendations in the "Check Server Security" options.
I've made quite a few adjustments and rescanned each time and mysecurity rating increases each time as expected.
However there are 2 options that I think I've made the suggested changes properly, but when I recheck server security CSF still informs me I need to make those changes. The options are:
Check for DNS random query source port
and
Check SSH UseDNS
For "Check for DNS random query source port" I commented out the query-source line in all the named related files in /etc. I have restarted te named service recanned CSF server security and it still says I need to make that change.
For "Check SSH UseDNS" I edited the /etc/ssh/sshd_config file and added the "UseDNS no" option. I restarted sshd and rescanned CSF security. It also shows I still need to make that change.
Has anyone else seen thios issue or have any suggestions regarding something I may have missed?