0
votes
1answer
58 views

How to block/ban clients that try to access some paths / urls?

Some spambots hammer my server with nonexisting paths like /user/pass?=asdfdasfas How could I block any access to /user/pass?=* ? Is there a better tool than iptables or csf for catching such crap?
0
votes
1answer
354 views

Ubuntu Server DDoS protection [duplicate]

I've seen many articles on DDoS protection, but none work. I need protection for a socket server i'm running on the server. It's running on port 9876 and it's for a flash-based game. when it gets ...
0
votes
1answer
146 views

Open torrent ports in csf

I use aria2 on my office with debian linux and aria2web to download some torrents on that. in brief it's a torrent client. but if i turn on csf, aria2c can't do that. which config should i do for csf ...
0
votes
1answer
66 views

How to block access from all hosting services? (like gutenberg.org) [closed]

gutenberg.org blocks access to all hosting services as per http://www.gutenberg.org/error403.php How to achieve this? Is there a list of hosting ips? Also, would these be added to CSF?
0
votes
1answer
425 views

IPTABLES nat maintaining source IP address with CSF

We have been using CSF on a virtualized (OpenVZ) environment successfully for a while combining venet and bridged interfaces so we can use public IPs + local addressed virtual systems. Kernel IP ...
-1
votes
3answers
745 views

Not using SSH Pubkey Authentication is really serious security flaw compare to regular Password Authentication

How would using PubkeyAuthentication would be in a single way more secure than using PasswordAuthentication, considering the fact that the server's Firewall blacklists an IP after 2 unsuccessful ...
0
votes
1answer
126 views

Interpreting CSF emails

I get emails from CSF every time it blocks someone. Here's one I got this morning: Time: Sat Jan 19 10:17:24 2013 -0800 IP: <REDACTED> (US/United States/-) Hits: 21 Blocked: ...
1
vote
0answers
104 views

CSF: Changing portflood settings to deny IP longer than second interval?

I've recently been under attack and I'm configuring CSF firewall for my Ubuntu server (latest). I found out portflood settings only block the ip for the specified second count, but I would like ...
0
votes
1answer
192 views

Exclude minify from CSF/LFD

I have currently installed minify on on of my websites however I am currently getting hammered with email from CSF/LFD. Example: Time: Fri Aug 10 13:10:03 2012 +0700 File: ...
0
votes
1answer
601 views

ConfigServer Security and Firewall — after setup, how much daily management required?

I'm looking at using ConfigServer Security and Firewall (CSF; iptables-based). After I configure it properly, how much daily ongoing management is required of me to keep my server secure? Am I going ...
1
vote
1answer
709 views

Config Server Firewall: Spamming my email | lfd on localhost: Suspicious process running under user www-data

I have just installed and configured CSF and I am getting 100s of spam emails containing this message. lfd on localhost: Suspicious process running under user www-data Time: Wed May 23 01:05:52 ...
0
votes
1answer
386 views

Pros vs Cons of Rate Limiting ICMP [duplicate]

I am configuring Config Server Firewall and here is the default config for ICMP. I have read on the internet that disabling or limiting ICMP can cause huge headaches on your server. However I have ...
0
votes
1answer
4k views

Config Server Firewall: You need to install the missing perl modules and then install cxs

I am trying to install config server firewall however when i follow the tutorial and run install.sh i get the following error. Can anyone help? root@localhost:~/csf# sh install.sh Configuring for OS ...
0
votes
2answers
737 views

Should I disable iptables when I'm using csf?

Should I disable iptables when I'm using csf ? any help appreciated.
2
votes
1answer
1k views

Allowing specific ports on specific interfaces/ip with CSF

I just learned about CSF, and like the logging/blocking possibilities it gives me. However it does not do the desired blocking. The situation is following, I have a server with multiple ip-addresses. ...
0
votes
1answer
533 views

Allow all IPs through a specific port range in CSF

How can I do this? For UDP it seems to work like this: udp:out:d=1_9000:d=0.0.0.0/0 but it doesn't seem to work when I change it to TCP and I need to enter a specific IP like ...
0
votes
3answers
2k views

How does iptables execute rules?

I've been having some trouble with a firewall blocking traffic between two servers recently and want to check how iptables handles multiple rules applying to the same IP. If I run iptables -L -n | ...
0
votes
1answer
268 views

Allow IP range through linux firewall

I need to set up a rule to allow ALL outgoing UDP connections on my VPS. I am not sure what I should be using. I have tried: udp:out:d=1_9000:d=* in my csf.allow but its not working (and it was a ...
1
vote
1answer
573 views

csf dovecot and IP blocking

I'm using csf and noticed a lot of brute force password attempts into a particular pop3 account. csf does not appear to be blocking the IP addresses as it does with other processes. Is there a switch ...
0
votes
2answers
911 views

flushed and removed iptables rules, but CSF restores them

Intending to clear my iptables rules (i have like a thousand rules which block many customer IPs, and I can't find which is doing it), I removed all csf.deny entries, then : service iptables stop ...
1
vote
1answer
114 views

CSF Firewall - priority

If a whitelisted IP (csf.allow) uses the wrong password more than 5 times, are they then automatically added to csf.deny? If so, does csf.deny OVERULE csf.allow so that they would be denied access?