Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [csf]

ConfigServer Security & Firewall

A Packet Inspection (SPI) firewall and Login/Intrusion Detection application for Linux servers. Combines firewall with log monitoring tools for general Linux security protection. Web interface works from cpanel or webmin.

http://configserver.com/cp/csf.html

126 questions
0
votes
1 answer

Munin FW_Conntrack Timing Out

I recently installed CSF firewall. Immediately after this, my Munin has stopped showing me graphs for Connections through firewall and ipconntrack. I looked into log files and found this 2011/02/27-19:45:01 CONNECT TCP Peer: "192.168.156.237:57918"…
Sparsh Gupta
  • 1,127
  • 7
  • 21
  • 31
0
votes
1 answer

CSF on CentOS not removing tempban/tempdeny

I have CSF v5.12 (generic) installed on my CentOS 4.4 server, and am trying to use the tempban/tempdeny feature to temporary add a firewall block to a specific IP. (I am building a PHP script which needs to block abusive users for an hour) The…
Stephen RC
  • 631
  • 3
  • 8
  • 13
0
votes
0 answers

Limiting the number of url address characters on the site and blocking it

hackers are slowing down my server They send repeated requests with different IPs They are constantly sending long url addresses like below: mysite.com/asm-nfm555sd5-nfm.mp3asm-dnfm555sd5-nfm.mp3asdnfm555sd5-nfm.mp3asm-dnfm555sd5-nfm.mp3 ... Can I…
sanja
  • 1
  • 1
0
votes
0 answers

CSF : Block Port but ignore

Is it possible to block a port (port 585) and not have it trigger an IP block ? Customers using Apple Mail are constantly hitting port 585 (I think Mac Mail attempts to go into 'troubleshooting mode' and spams the port for each email account setup…
SupaMonkey
  • 113
  • 4
0
votes
1 answer

CSF has port 22 listed for TCP_IN, what is blocking certain IPs?

I went through my whole csf config, and unless I'm missing something it's not treated or listed any differently than port 80, although it blocks all IPs that are not white listed. Port 80 will allow any IP address regardless. Is blocking IPs for…
rubixibuc
  • 89
  • 1
0
votes
0 answers

CSF Deny an IP Range Exclude specific IP on specific port

I've bunch of ips / networks added to csf.deny csf.deny 1.1.0.0/19 # do not delete However i want to allow 1.1.1.1 on port 80 and 443 with csf.allow csf.allow tcp|in|d=80|s=1.1.1.1 tcp|in|d=443|s=1.1.1.1 is not working and csf.allow 1.1.1.1 not…
Procus
  • 1
0
votes
1 answer

Whitelisting Gmail SMTP in CSF

In my csf.deny, I have 0.0.0.0/0 blocked to prevent requests being sent to the raw server IP. This creates issues with sending e-mails. I utilize Google SMTP to send e-mail. I can't seem to figure out how to whitelist Gmail's SMTP while blocking…
anxiety
  • 3
  • 3
0
votes
0 answers

docker cannot reach external urls

i have a server and it has installed CSF (firewall). I run docker in the server and the docker-CSF config is enabled, I can reach the containters via nginx reverse proxy. But i have a problem, the container cannot reach external urls, ex: google.com…
juanbits
  • 111
  • 3
0
votes
1 answer

How can I stop this kind of exim attack?

I has been search here, BUT no topic about my question (they just ask for their email was rejcted, but this time, not my email was been reject), it seem someone try to send spam out via my server, however this one is very annoying, it start to try…
simonlo
  • 1
  • 1
0
votes
2 answers

How to block IPs making requests to specific domain?

I have a server with CSF and ModSecurity enabled. I'd like to set up a rule or configuration that will automatically block (for a specified amount of time) any IP that makes incoming requests to a particular subdomain. In this instance it is…
inspirednz
  • 173
  • 1
  • 9
0
votes
1 answer

Getting random 404 requests from unknown IPs in Apache + Ubuntu server

This is strange. I just installed a new Ubuntu + Apache in my Digitalocean droplet and installed a Laravel APP there. Now suddenly I see these kind of strange POST, GET and CONNECT requests from unknown IPs. Screenshot:…
Sarwar Alam
  • 1
0
votes
1 answer

CSF firewall - Only allow FTP access to users connecting via specific hostname

I'd like to only allow FTP access to users who connect via a specific hostname like: portal4321.vps22.hostingserver.com. And block every request which tries to connect to the FTP in a different manner, like ones who use the server IP or…
Peps
  • 23
  • 1
  • 1
  • 7
0
votes
1 answer

CSF not blocking traffic to docker

CSF is installed at host and following is applied https://github.com/juli3nk/csf-post-docker When IP is blocked in CSF, ICMP and request to all other ports gets blocked (except the ones which are configured by docker). If docker0 is listening to…
mg_sa
  • 1
0
votes
1 answer

How to automatically block with MODSEC or CSF an IP Address when it tries to access a URL

We have in our server logs every day continuos bot trying to access the below for example: Requests with error response codes 404 Not Found /favicon.ico: 3 Time(s) /3ckkB-ZOp30: 2 Time(s) /adminer-3.7.1.php: 2 Time(s) /eGfLqNJOuqgur2f: 2…
Devteam9200
  • 1
  • 2
0
votes
1 answer

CSF failed to Start after Ubuntu 20.04 upgrade from 18.04

Today I have upgraded my Ubuntu 18.04.04 VPS server to Ubuntu 20.04. Now CSF not starting and shows the following error and not start the CSF service. *Error* The path to iptables is either not set or incorrect for IPTABLES [/sbin/ip6tables] in…
Chathu
  • 97
  • 1
  • 12
1 2 3
…
8
9