[HOWTO] Install CSF + Use it's GUI in VestaCP

[jonn]

I looked in the /list/csf folder and nothing was in there so I thought um...

Yep, missing unzip.

Code: Select all

apt-get install e2fsprogs

reinstalled csf mod.
works. all good.

debian 7.

[SS88]

I looked in the /list/csf folder and nothing was in there so I thought um...

Yep, missing unzip.

Code: Select all

apt-get install e2fsprogs

reinstalled csf mod.
works. all good.

debian 7.

Goodie! :)

[amitz]

Hello,

I did install this csf , after that i did installed the vesta automatic app installer.
Now i dont see csf link in my vesta panel?
Any idea why it get removed?

[SS88]

Hello,

I did install this csf , after that i did installed the vesta automatic app installer.
Now i dont see csf link in my vesta panel?
Any idea why it get removed?

Hello. Automatic app installer has changed panel.html - you will have to add the CSF link manually.

Change file /usr/local/vesta/web/templates/admin/panel.html

add code:

Code: Select all

<div class="l-menu__item <?php if($TAB == 'CSF' ) echo 'l-menu__item--active' ?>"><a href="/list/csf/"><?=__('CSF')?></a></div>

anywhere between <div class="l-menu clearfix noselect"> </div> tags

[amitz]

Thnx, got it now :)

[jonn]

Share customlog entry to block failed vestacp login attempts.

on debian 7

open. /etc/csf/regex.custom.pm
add after # "1" = n/temporary (n = number of seconds ...

Code: Select all

#vestacp
if (($globlogs{CUSTOM1_LOG}{$lgfile}) and ($line =~ /^\S+\s+\S+\s+\S+\s+\S+\s+failed to login/)) {
  return ("Failed vestacp control-panel login from",$1,"VESTAloginAttempt","5","8083","60");
}

"5" is count of failed logins
"8083" the port to block
"60" how long to deny (60 is 1 minute) so change to what you want, or 1 for permanent.

open /etc/csf/csf.conf
add where you find CUSTOM1_LOG

Code: Select all

CUSTOM1_LOG = "/var/log/vesta/auth.log"

dont block yourself, keep the deny time to low for testing
if you change regex a little, please share changes..
and any other csf customlog blocking that may be helpful to all of us related only to vestacp control panel...
dont forget to add your OS

[jonn]

Another.. source from csf forum..

pesky ylmf-pc exim attacks

on debian 7.

/etc/csf/csf.conf

Code: Select all

CUSTOM2_LOG = "/var/log/exim4/rejectlog"

/etc/csf/regex.custom.pm

Code: Select all

#exim4 smtp_auth attack
if (($globlogs{CUSTOM2_LOG}{$lgfile}) and ($line =~ /^\S+\s+\S+\s+dovecot_login authenticator failed for \(ylmf-pc\) \[(\S+)\]/)) {
  return ("exim4 smtp_auth attack",$1,"SecYLMF","1","1");
}

1 chance and 1 for permanent block on this one..

[amitz]

Hello,

the same happens again, either app installer or csf is showing not both.

Hello,

I did install this csf , after that i did installed the vesta automatic app installer.
Now i dont see csf link in my vesta panel?
Any idea why it get removed?

Hello. Automatic app installer has changed panel.html - you will have to add the CSF link manually.

Change file /usr/local/vesta/web/templates/admin/panel.html

add code:

Code: Select all

<div class="l-menu__item <?php if($TAB == 'CSF' ) echo 'l-menu__item--active' ?>"><a href="/list/csf/"><?=__('CSF')?></a></div>

anywhere between <div class="l-menu clearfix noselect"> </div> tags

[SS88]

Hello,

the same happens again, either app installer or csf is showing not both.

Hello,

I did install this csf , after that i did installed the vesta automatic app installer.
Now i dont see csf link in my vesta panel?
Any idea why it get removed?

Hello. Automatic app installer has changed panel.html - you will have to add the CSF link manually.

Change file /usr/local/vesta/web/templates/admin/panel.html

add code:

Code: Select all

<div class="l-menu__item <?php if($TAB == 'CSF' ) echo 'l-menu__item--active' ?>"><a href="/list/csf/"><?=__('CSF')?></a></div>

anywhere between <div class="l-menu clearfix noselect"> </div> tags

Hello. You will have to manually do this as both "plugins" are unofficial ways to install this software so both overwrite each other.

[amitz]

Hello,

yes i manully did the changes in /usr/local/vesta/web/templates/admin/panel.html
It worked but now it isn't.