var sidebar_align = 'right';
var content_container_margin = parseInt('350px');
var sidebar_width = parseInt('330px');
Is it safe to block\enable following in CSF:
How do i know that its not going to block valid traffic?
With firewall there will always b a risk of valid traffic getting blocked.
If you need safety need to compensate for that.
I installed CSF 4-5 hours ago, and for some reason CSF is blocking valid traffic i think.
Oct 5 16:59:17 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:0e:2e:e8:e2:81:00:09:b7:42:74:00:08:00 SRC=126.96.36.199 DST=MY-IP LEN=83 TOS=0x00 PREC=0x00 TTL=57 ID=9512 DF PROTO=TCP SPT=25 DPT=35651 WINDOW=8326 RES=0x00 ACK PSH FIN URGP=0
Resolved 188.8.131.52 to mta-v1.mail.vip.sp2.yahoo.com
Not only yahoo is being blocked, but many more, hotmail, facebook etc.
Also, i noticed this:
Oct 5 16:42:11 server kernel: Firewall: *TCP_OUT Blocked* IN= OUT=eth0 SRC=MY-IP DST=184.108.40.206 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=10557 DF PROTO=TCP SPT=80 DPT=10476 WINDOW=5840 RES=0x00 ACK PSH FIN URGP=0
Port 80 has been added to TCP_OUT allowed list, same as in TCP_IN.
Did you configure it correctly ?
I have installed csf in many servers and not a single such issue.
You can pm us and we can look in this issue
Did you check the IP in the spam database to see if it listed?
Do you really need port 80 to be added in the outgoing port list?
Originally Posted by eth10
I have been using (and still use) CSF on some servers with same configuration without error.
On this server i have decided to uninstall CSF and configured just iptables.
Thank you so much for ideas and support!
Originally Posted by david510
yes, i checked and that IP is not listed to any spam database list.
As for port 80, as i said i am using just iptables on this server.
By LastQuark in forum VPS Hosting
Last Post: 07-06-2007, 01:39 AM
By active8 in forum Running a Web Hosting Business
Last Post: 05-18-2006, 05:55 PM
By iamverysad in forum Web Hosting Lounge
Last Post: 05-08-2003, 08:28 AM
By Zero Enna in forum Web Hosting
Last Post: 04-05-2002, 01:33 PM
By mjmsr in forum Web Hosting
Last Post: 09-07-2001, 01:31 AM