ConfigServer Services Blog

Changes:

• Added checks before Net::CIDR:Lite calls to ensure inputs are CIDR’s to prevent module failures
• New feature – LF_CPANEL_ALERT. Send an email alert if anyone accesses WHM via root. An IP address will be reported again 1 hour after the last tracked access (or if lfd is restarted)

Changes:

• Modified mail sending code to use a common procedure that copes better with differing combinations and variations of From:, To:, LF_ALERT_TO and LF_ALERT_FROM settings for lfd alerts

Changes:

• Code speedups in csf –grep
• Added csf.allow and GLOBAL_ALLOW lookups during lfd blocking and note added to alert if ip match found
• Modified Server Check for Fedora v9 EOL now that Fedora v11 has been released
• Modified iptables output from csf.pl to exclude the Fedora v11 intrapositioned negation messages
• Fixed typo in integrity.txt alert template for new installations
• Modified the email header for csf –mail
• Fix Relay Tracking from 127.0.0.1 to always report as a LOCALRELAY
• Modified lfd output filehandle names to avoid read/write conflicts
• Added Advanced Allow/Deny Filters for csf.dyndns. See readme.txt for an example
• Added new option CC_ALLOW_FILTER as an alternative to CC_ALLOW where only listed Country Codes are allowed, however normal port and packet filter rules are still applied to those connections. All other connections are dropped

Changes:

• Modified UI access to csf.sips to display checkboxes instead of direct editing, for ease of use
• Fixed problem where RELAYHOSTS setting wasn’t always being honoured
• Modified mod_security configuration editor to handle HTML elements
• Rewritten RT_*_ALERT regex and counting code to better deal with a variety of exim log output formats
• Added recipient count to RT_*_ALERT to include emails sent to multiple recipients. This option requires that the exim log_selector setting in the exim configuration includes the option: +received_recipients So, the recommended log_selector setting is now:
  

Changes:

• Added Gentoo support
• Added Server Check for MySQL LOAD DATA LOCAL
• Modified Server Check for enable_dl to check whether dl() is in disable_functions

Changes:

• Added ipv6 IP detection for proftpd login failures
• Removed ossec and webmin from the Server Check services section