Solved lfd notifications

[Marius B]

After i installed directadmin & csf on debian 10 i don't receive alert notifications. Everything in csf configuration is ok but no alert notifications for ssh login etc...

 

[Daniel_Dog]

I think that the default settings for the email notifications has changed. So it might now by default not send these email anymore. But i can not find this change in the recent changelog.
But i think this is the case since this also happend on my fresh install.

 

[Marius B]

On Centos 7,8 & CL is working but on Debian i see it doesn't.

 

[Richard G]

Did you check your mail queue that the mails are not being put in the queue and can't be delivered?

 

[Marius B]

Did you check your mail queue that the mails are not being put in the queue and can't be delivered?

Yes nothing there. I see i receive notifications if an ip is blocked but no ssh login notifications.

 

[Richard G]

Is your ip in the csf.allow and/or csf.ignore? If yes, you won't get login notifications. But I guess you either already checked or you're talking about ssh logins not being from your ip.
Login notifications are only if a real login did take place.

 

[Marius B]

It was when i installed csf but i removed the ip and still nothing, also tried from other ips and i get nothing.

 

[Richard G]

That's indeed odd. If you already checked csf.conf if mail should be send on ssh login.
Oh this could also cause it:
RESTRICT_SYSLOG = "2"
should be 3 to get notifications if I'm not mistaken.
Also check the option on the end of csf.conf:
SSHD_LOG = "/var/log/secure"
It might be that Debian uses another logfile for SSHD.

If that all is not the case, then I don't know.

 

[Marius B]

SSHD_LOG = "/var/log/secure"

changed SSHD_LOG = "/var/log/secure" to SSHD_LOG = "/var/log/auth.log"

Thank you Richard

 

[Richard G]

You're welcome! Nice to hear that was the cause.

 

[Marius B]

I thought csf put them on automatically.

 

[Richard G]

If ./install_directadmin.sh is used, then most default values are setup automatically. But the CSF does not determine which distro is used, and since CSF is in fact made for Centos/cPanel, that is the reason that Centos defaults are used.

So no not all values are put automatically, most are because most are things like ports and checking values.

 

[Daniel_Dog]

Could you mark this thread as solved?

 

[Richard G]

No I'm not a moderator. Marius B can since he's the thread starter, it's his topic so he can set it to solved if his issue is solved.

 

[Daniel_Dog]

No I'm not a moderator. Marius B can since he's the thread starter, it's his topic so he can set it to solved if his issue is solved.

This was also directed to the thread starter. Sorry for any confusion.

 

[Marius B]

Yes the issue has been solved but i don't find any option to mark it as solved.

 

[Daniel_Dog]

Yes the issue has been solved but i don't find any option to mark it as solved.

Click on the 3 dots at the top of the thread and then click on edit thread. Then you can add the Sovled prefix before the title.