Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [csf]

ConfigServer Security & Firewall

A Packet Inspection (SPI) firewall and Login/Intrusion Detection application for Linux servers. Combines firewall with log monitoring tools for general Linux security protection. Web interface works from cpanel or webmin.

http://configserver.com/cp/csf.html

121 questions
2
votes
1 answer

Config Server Firewall: Spamming my email | lfd on localhost: Suspicious process running under user www-data

I have just installed and configured CSF and I am getting 100s of spam emails containing this message. lfd on localhost: Suspicious process running under user www-data Time: Wed May 23 01:05:52 2012 +0200 PID: 8503 Account: www-data Uptime: …
h00j
  • 378
  • 6
  • 21
2
votes
1 answer

Allowing specific ports on specific interfaces/ip with CSF

I just learned about CSF, and like the logging/blocking possibilities it gives me. However it does not do the desired blocking. The situation is following, I have a server with multiple ip-addresses. I'm running apache on a ip, and ssh on a other…
Paul Jacobse
  • 131
  • 1
  • 6
2
votes
3 answers

How does iptables execute rules?

I've been having some trouble with a firewall blocking traffic between two servers recently and want to check how iptables handles multiple rules applying to the same IP. If I run iptables -L -n | grep 1.2.3.4 I see this output: ACCEPT all -- …
Dave Child
  • 297
  • 5
  • 15
2
votes
2 answers

How much of a linux security problem is "IP spoofing"?

I am using ConfigServer Security & Firewall (CSF) to limit port access to whitelist IP addresses. However I have heard that IP addresses can be spoofed. How wide-spread is this problem, and is it something I should be concerned with?
Owen
  • 356
  • 5
  • 19
1
vote
0 answers

CSF/LFD: Firewall automatically disabling again and again

I have setup a droplet on Digital Ocean, and installed CentOS Web Panel. After the initial configuration, I've enabled CSF/LFD firewall. But it is automatically disabling, again and again. I have enabled 3 time in last 24 hours. I want to know:…
Alena
  • 97
  • 1
  • 8
1
vote
2 answers

Brute Force attack in DirectAdmin

I have problem with brute force monitor in direct admin. Every minute i get info like this: 15705610210001 52.187.17.107 123 1 sshd4 Oct 8 20:56:24 server sshd[10817]: Failed password for invalid user 123 from 52.187.17.107 port 40775…
jedlu91
  • 11
  • 2
1
vote
1 answer

Cloudflare behind site iptables not blocking HTTP and HTTPS ports

When the Fail2ban trigger an IP ban action, I want to block all the ports on my Ubuntu Server. Right now, I use banaction = iptables-allports and CSF. At this moment it only blocked SSH port, even if I use iptables-allports in fail2ban. I face this…
Chathu
  • 87
  • 1
  • 11
1
vote
3 answers

How to config CSF to allow postrouting in iptables for installing OpenVPN?

I am installing OpenVPN on my server and according to the tutorial I'm following I have to add the following line to iptables: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE I add it and save it and successfully restart iptables but then I…
stressed out
  • 111
  • 5
1
vote
1 answer

Docker, csf and mariadb connection

I have a host with csf firewall allowing some external ports like ssh, http, https. I have now installed docker and mariadb through docker. I use docker run command with -p 6000:3306, so that means that docker exposes mariadb port in 6000. I try…
Harris
  • 123
  • 4
1
vote
1 answer

Block direct port 80 access on default IP using iptables?

I am using nginx with cloudflare in front of my sites to protect them from layer 7 attacks but now some attackers found this new way and they are daily attacking my default IP directly with layer 7 attack instead of attacking the sites. I am…
Surfer
  • 11
  • 3
1
vote
1 answer

FTP command line: Could not open data connection to port 48412: Connection timed out

I'm trying to send a file using ftp command line. It's working in my laptop by not in my vps server. ftp -v -n <
mbouzahir
  • 77
  • 10
1
vote
1 answer

CSF firewall in EC2

I am a developer who has very limited knowledge of server administration; I learn as I go and mainly deal with web servers. Is a firewall like CSF needed on something like EC2 given that AWS already provides a basic firewall?
d0001
  • 319
  • 1
  • 3
  • 7
1
vote
1 answer

How to block a small IP range in csf

I'm looking for a way to block a small ip range in csf, e.g. 151.80.31.103 to 151.80.31.115 I know how to block each ip by issuing a cmmand csf -d IP, but it is a lot more effective to have a way to block a small set of ip range, as the given…
aye
  • 229
  • 3
  • 11
1
vote
0 answers

CSF integrated UI stops working after few minutes

I have a Centos web server without any control panel like cPanel I've installed CSF/LFD and I've configured it to enable the integrated UI It was working fine using port 6666, but after few minutes the UI not working at all And I have to reboot the…
Mostafa
  • 131
  • 1
  • 8
1
vote
0 answers

LFD is unable to download blocklist RBN, cannot remove it from config

I set up CSF on my cPanel installation to help manage the firewall and provide brute-force protection. One of the features of CSF (Actually LFD, which comes included) is the ability to block IP addresses listed on blocklists, such as spamhaus or…
Cas
  • 171
  • 1
  • 9
1
2
3
…
8 9