Results 1 to 7 of 7

Thread: Config Server & Firewall

  1. #1
    Join Date
    Jul 2010
    Posts
    74

    Config Server & Firewall

    I use CSF on my new CentOS 7 VPS server.

    I have ran the firewall check and I see following warnings:

    1. Check MySQL LOAD DATA disallows LOCAL
    my.cnf file contains the following:
    !includedir /etc/my.cnf.d

    in that directory I have several files. in the file etc/my.cnf.d/server.cnf I have following
    [mysqld]
    local-infile = 0



    2. Check dovecot weak SSL/TLS Ciphers (ssl_cipher_list)
    my /etc/dovecot/dovecot.conf contains the following:
    !include conf/ssl.conf

    in that file I have the following:
    ssl_cert = </etc/exim.cert
    ssl_key = </etc/exim.key

    ssl_protocols = !SSLv2 !SSLv3
    ssl_cipher_list = ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP



    So I have these setting, Why do I still have these warnings?

  2. #2
    Join Date
    Apr 2005
    Location
    GMT +7.00
    Posts
    12,708
    Hello,

    You can ignore the alerts, as CSF/LFD does not check those directories and checks only:

    /etc/my.cnf, /etc/dovecot.conf, etc.

  3. #3
    Join Date
    Jul 2010
    Posts
    74
    Ok thanks for information.

    They should also check these directories, maybe they will in future release.

  4. #4
    Join Date
    Apr 2005
    Location
    GMT +7.00
    Posts
    12,708
    Feel free to bring it to their attention then

  5. #5
    Join Date
    Jul 2010
    Posts
    74
    already done 2 months ago .... but no answer.
    But will try again :-)

  6. #6
    Join Date
    Jul 2016
    Posts
    28
    Quote Originally Posted by zEitEr View Post
    Hello,

    You can ignore the alerts, as CSF/LFD does not check those directories and checks only:

    /etc/my.cnf, /etc/dovecot.conf, etc.
    Is there a away to skip or disable the checking from CSF/LFD. I want the green color satisfaction..

  7. #7
    Join Date
    Apr 2005
    Location
    GMT +7.00
    Posts
    12,708
    Never had this task before, so I don't have an answer. Read the docs from CSF/LFD and/or ask developers about it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •