CSF questions

[TimVNL]

Hello,

I just installed CSF on a new DirectAdmin install on CentOS8 and it working great

But is there a optimal csf configuration for safety and security?
I am now using the Medium Profile right now but I want to know if it can be optimized even further.

I installed CSF with the following steps :

cd ~
wget -O csf-bfm-install.sh https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/install.sh
chmod 700 csf-bfm-install.sh
./csf-bfm-install.sh

One problem I have is getting blocked when using FTP (FileZilla) downloading files even when my IP is whitelisted.

 

[Ohm J]

Hello,

I just installed CSF on a new DirectAdmin install on CentOS8 and it working great

But is there a optimal csf configuration for safety and security?
I am now using the Medium Profile right now but I want to know if it can be optimized even further.

I installed CSF with the following steps :

cd ~
wget -O csf-bfm-install.sh https://raw.githubusercontent.com/poralix/directadmin-bfm-csf/master/install.sh
chmod 700 csf-bfm-install.sh
./csf-bfm-install.sh

One problem I have is getting blocked when using FTP (FileZilla) downloading files even when my IP is whitelisted.

I think it option by " PORTFLOOD "
Have you check it now ?

Because You need setting by your server performance and status on your server.

 

[Wanabo]

When installing csf your ip will automatically end up in \etc\csf\csf.allow.
But lfd still "watches" your ip for "bad" things. Add your ip also in \etc\csf\csf.ignore.

# The following IP addresses will be ignored by all lfd checks

Restart csf and lfd. For CentOS
service csf restart
service lfd restart

 

[Richard G]

But lfd still "watches" your ip for "bad" things. Add your ip also in \etc\csf\csf.ignore.

Instead of this, you can also have this setting enabled (if it's not already by default)

IGNORE_ALLOW = "1"

Then you don't have to enter ip's twice anymore, only in the csf.allow file.
Ofcourse also restart csf and lfd after changing.