D duzap Verified User Joined Nov 14, 2008 Messages 41 Sep 24, 2011 #1 Hi, I want to install one of them, but I am afraid of incompatibility problems. I have CentOS 5.6 x64 I would like to install CSF / APF (the better) to work with DirectAdmin. Can you instruct me or link me to the right place? Best regards,
Hi, I want to install one of them, but I am afraid of incompatibility problems. I have CentOS 5.6 x64 I would like to install CSF / APF (the better) to work with DirectAdmin. Can you instruct me or link me to the right place? Best regards,
M muarifer Verified User Joined Jan 28, 2009 Messages 10 Sep 24, 2011 #2 Hello, I use CSF + DirectAdmin in CentOS 5.6 x86 successfully. CSF uses iptables. If it works in your server, CSF might work. Installation CSF is easy. You should follow instructions at http://configserver.com/free/csf/install.txt
Hello, I use CSF + DirectAdmin in CentOS 5.6 x86 successfully. CSF uses iptables. If it works in your server, CSF might work. Installation CSF is easy. You should follow instructions at http://configserver.com/free/csf/install.txt
D duzap Verified User Joined Nov 14, 2008 Messages 41 Sep 24, 2011 #3 Thanks! I really loved it and it works perfectly with DirectAdmin, I love the GUI.
D duzap Verified User Joined Nov 14, 2008 Messages 41 Sep 25, 2011 #4 Hi, Just one thing: I am receving this in my logfile Sep 25 17:05:27 server lfd[3595]: *Suspicious Process* PID:2120 User:rpc Uptime:1739116 secs EXE:/sbin/portmap CMDortmap Sep 25 17:05:27 server lfd[3595]: *Suspicious Process* PID:20385 User:rpcuser Uptime:692930 secs EXE:/sbin/rpc.statd CMD:rpc.statd Sep 25 17:05:27 server lfd[3595]: *User Processing* PID:20385 Kill:0 User:rpcuser Time:692930 EXE:/sbin/rpc.statd CMD:rpc.statd Sep 25 17:05:27 server lfd[3595]: *User Processing* PID:2120 Kill:0 User:rpc Time:1739116 EXE:/sbin/portmap CMDortmap And many more lines like these. Can you explain it? Why portmap and rpc.statd detected as suspicious? How do I whitelist them? What do you recommend me to do? Best regards,
Hi, Just one thing: I am receving this in my logfile Sep 25 17:05:27 server lfd[3595]: *Suspicious Process* PID:2120 User:rpc Uptime:1739116 secs EXE:/sbin/portmap CMDortmap Sep 25 17:05:27 server lfd[3595]: *Suspicious Process* PID:20385 User:rpcuser Uptime:692930 secs EXE:/sbin/rpc.statd CMD:rpc.statd Sep 25 17:05:27 server lfd[3595]: *User Processing* PID:20385 Kill:0 User:rpcuser Time:692930 EXE:/sbin/rpc.statd CMD:rpc.statd Sep 25 17:05:27 server lfd[3595]: *User Processing* PID:2120 Kill:0 User:rpc Time:1739116 EXE:/sbin/portmap CMDortmap And many more lines like these. Can you explain it? Why portmap and rpc.statd detected as suspicious? How do I whitelist them? What do you recommend me to do? Best regards,
SeLLeRoNe Super Moderator Joined Oct 9, 2004 Messages 6,806 Location A Coruña, Spain Sep 25, 2011 #5 edit Code: /etc/csf/csf.pignore and add Code: exe:/sbin/portmap exe:sbin/rpc.statd then restart csf Code: /etc/init.d/csf restart /etc/init.d/lfd restart Regards
edit Code: /etc/csf/csf.pignore and add Code: exe:/sbin/portmap exe:sbin/rpc.statd then restart csf Code: /etc/init.d/csf restart /etc/init.d/lfd restart Regards
nobaloney NoBaloney Internet Svcs - In Memoriam † Joined Jun 16, 2003 Messages 26,113 Location California Sep 26, 2011 #6 What? You don't like getting hundreds to thousands of emails every week? Jeff
D duzap Verified User Joined Nov 14, 2008 Messages 41 Sep 27, 2011 #7 SeLLeRoNe, Thanks. jlasman, I don't understand what you mean. please explain yourself maybe your note was important for me. Last edited: Sep 27, 2011
SeLLeRoNe, Thanks. jlasman, I don't understand what you mean. please explain yourself maybe your note was important for me.
nobaloney NoBaloney Internet Svcs - In Memoriam † Joined Jun 16, 2003 Messages 26,113 Location California Sep 27, 2011 #8 Just a poor attempt at being funny. Sorry. Jeff
B bcoker Verified User Joined Sep 7, 2010 Messages 59 Sep 27, 2011 #9 jlasman said: Just a poor attempt at being funny. Sorry. Jeff Click to expand... Not at all Jeff.