[HOWTO] Install CSF + Use it's GUI in VestaCP

[hammy]

Problems with GUI

Will not show options for:-

Firewall Allow IPs

Firewall Deny IPs

lfd Blocklists

When those buttons are clicked it takes you to a page with just a 'Return' button. There seems to be a letter 'm' in the very bottom corner of those pages so maybe a error.

Please re-run the command - all fixed.

Works well thanks for your help :)

[rpr]

Installed CSF but vsftpd fails aren't banned.
Changed VSFTPD_LOG = "/var/log/vsftpd.log"

but nothing happens. Anyone else have this problem?

[SS88]

Installed CSF but vsftpd fails aren't banned.
Changed VSFTPD_LOG = "/var/log/vsftpd.log"

but nothing happens. Anyone else have this problem?

Mine do not get blocked either. If your settings are correct in CSF then CSF has a problem. There is a way to fix this be using custom regex patterns like so (I've not tested this fully yet!):

Code: Select all

if (($globlogs{LF_FTPD}{$lgfile}) and ($line =~ /FAIL LOGIN: Client \"(\S+)\"/)) {
		return ("Failed FTP login from",$1,"vsftpd_ss88","5","20,21","1");
	}

[rpr]

Installed CSF but vsftpd fails aren't banned.
Changed VSFTPD_LOG = "/var/log/vsftpd.log"

but nothing happens. Anyone else have this problem?

Mine do not get blocked either. If your settings are correct in CSF then CSF has a problem. There is a way to fix this be using custom regex patterns like so (I've not tested this fully yet!):

Code: Select all

if (($globlogs{LF_FTPD}{$lgfile}) and ($line =~ /FAIL LOGIN: Client \"(\S+)\"/)) {
		return ("Failed FTP login from",$1,"vsftpd_ss88","5","20,21","1");
	}

Yeah but a simpler solution is just to use proftpd.
That works out of the box.

[SS88]

Installed CSF but vsftpd fails aren't banned.
Changed VSFTPD_LOG = "/var/log/vsftpd.log"

but nothing happens. Anyone else have this problem?

Mine do not get blocked either. If your settings are correct in CSF then CSF has a problem. There is a way to fix this be using custom regex patterns like so (I've not tested this fully yet!):

Code: Select all

if (($globlogs{LF_FTPD}{$lgfile}) and ($line =~ /FAIL LOGIN: Client \"(\S+)\"/)) {
		return ("Failed FTP login from",$1,"vsftpd_ss88","5","20,21","1");
	}

Yeah but a simpler solution is just to use proftpd.
That works out of the box.

I don't know which is easier, following this tutorial to change FTP software: https://vestacp.com/docs/#how-to-replac ... hel-centos

Or adding a line in a file and restarting LFD :-P

[mericson]

Your effort might offer some great insights into creating an extensions mechanism for VestaCP !

[ServerHost]

Hello,

I installed on my vps, but it does not work with Proftpd. Do not block!

How do I block Proftpd?

[SS88]

Hello,

I installed on my vps, but it does not work with Proftpd. Do not block!

How do I block Proftpd?

Change the file /etc/csf/csf.conf and find

Code: Select all

FTPD_LOG = "/var/log/vsftpd.log"

and change to where proftpd log is

Code: Select all

FTPD_LOG = "/path/to/proftpd.log"

[ArisC]

I removed fail2ban and Iptables and CSF went Blank page for some reason.... http://imgur.com/a/Tt3O5

I tried to re-run the .sh file for CSF.... nothing... no errors in console.

[SS88]

I removed fail2ban and Iptables and CSF went Blank page for some reason.... http://imgur.com/a/Tt3O5

I tried to re-run the .sh file for CSF.... nothing... no errors in console.

Not sure.

Can you confirm the following files are present:

/usr/local/vesta/bin/v-csf
/usr/local/vesta/web/list/csf/index.php

and that you can enable csf:

Code: Select all

csf -e