CSF and CWP

Started by tokar86a, February 18, 2019, 08:46:04 AM

Previous topic - Next topic

tokar86a

CWP seems to think that CSF is disable but when i run

[root@vmi240766 ~]# csf -e
csf and lfd are not disabled!

So it seems to be some sort of bug here? What to do?

https://imgur.com/a/LFDPhi1

evansa

Hello,

Please run the following command to check if csf can run on your system
perl /usr/local/csf/bin/csftest.pl

tokar86a

[root@vmi240766 ~]# perl /usr/local/csf/bin/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK
Testing iptable_nat/ipt_DNAT...OK

RESULT: csf should function on this server

evansa

Please reinstall
Before doing that please backup csf.conf file with cp /etc/csf/csf.conf /etc/csf/csf.conf.bak

cd /usr/src
rm -fv csf.tgz
wget https://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

After please restore csf.conf

tokar86a

Same thing. It still say the same information.

Netino

Have you ever tried to disable it before?

The commands sequence:

# csf -x; csf -e


Regards,
Netino

tokar86a

Quote from: Netino on February 20, 2019, 03:06:43 AM
Have you ever tried to disable it before?

The commands sequence:

# csf -x; csf -e


Regards,
Netino

What do you mean?

Netino

Quote
What do you mean?

Instead to run just:

# csf -e



# csf -x; csf -e


olarian

Hi. i am facing the same isue.
Did you find any solution?
Thank you.
I now removed /etc/csf and reinstall csg. Let's see if now is going to work.
usually i can see it enabled, but after 15 minutes it shows disabled.

I noticed that this error appear because LFD gets disabled.
Fortunately, CSF stays enabled, but LFD is also very important.

olarian

It's been 25 minutes and no problems yet.
So it seems that removing /etc/csf and use the above "reinstallation guide", will fix the problem.
it may be the csf.conf we messed up.
So i will now add back my:
csf.ignore
csf.allow
csf.deny
csf.dyndns

Then restart and wait again. if everything goes well, i will try to modify csf.conf back to my previews settings so i can see which setting is not good.

olarian

It has been more than 40 minutes and still works.
So definetly removing /etc/csf and reinstalling, will fix the isue.
Couldn't figure out which setting i messed in csf.conf. So you better do all over again, but be more prudent.

lequangvu

Quote from: tokar86a on February 18, 2019, 08:46:04 AM
CWP seems to think that CSF is disable but when i run

[root@vmi240766 ~]# csf -e
csf and lfd are not disabled!

So it seems to be some sort of bug here? What to do?

https://imgur.com/a/LFDPhi1

This error is due to the configuration LF_IPSET=1 and CC_DENY="country code"
fix is running yum install ipset command and reboot => OK