LFD and port scanning false positive

upsforum

• December 11, 2013 09:56

I activated SSH access of my customer with a virtual host, the problem is that LFD blocked its ip with port scanning motivation: Dec 11 15:51:10 vps4 lfd[18580]: *Port Scan* detected from 00.000.00.000 (IT/Italy/host000-000-static.000-00-b.business.telecomi...). 11 hits in the last 171 seconds - *Blocked in csf* for 3600 secs [PS_LIMIT] [COLOR="silver">- - - Updated - - - I have this values in configuration file PS_INTERVAL = Default: 300 [0 or 60-3600] PS_LIMIT = Default: 10 [2-20] PS_PORTS = 0:65535,ICMP PS_DIVERSITY = Default: 1 [1-100] PS_PERMANENT = Default: 0 [0-1] PS_BLOCK_TIME = Default: 3600 [300-86400] PS_EMAIL_ALERT = Default: 1 [0-1]

• 

  cPanelMichael

  • December 11, 2013 16:07

  Hello :) Keep in mind that any issues directly related to LFD/CSF are better handled directly on their support forums. Thank you.

  0

Please sign in to leave a comment.