lfd Permanent Block (IP match in csf.allow, block may not work)

hello masters, I have a problem in my cpanel. my problem is about sshd : I ihave this message: assume MY_IP is my public IP that access cpanel server Time: Wed Mar 25 14:31:25 2015 +0700 IP: MY_IP (ID/Indonesia/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block (IP match in csf.allow, block may not work) Log entries: Mar 25 14:29:22 cpanel sshd[354144]: Did not receive identification string from MY_IP Mar 25 14:29:52 cpanel sshd[354197]: Did not receive identification string from MY_IP Mar 25 14:30:22 cpanel sshd[354281]: Did not receive identification string from MY_IP Mar 25 14:30:52 cpanel sshd[354321]: Did not receive identification string from MY_IP Mar 25 14:31:22 cpanel sshd[354382]: Did not receive identification string from MY_IP I allow MY_IP because i know it is save in csf.allow, but why this cpanel send me if my IP login failure?? Please help me master.

knight_dedy

March 25, 2015 08:08

sorry Webzesty, my problem are caused by sshd. may you help me why this happen?

cPanelMichael

March 25, 2015 15:20

Hello, The message you have posted is not coming from cPanel. It's coming from CSF, which is a third-party application that you have installed as your firewall. Feel free to post to their forums for assistance if it's actually blocking your IP address (it states that it won't block your IP if it's whitelisted):

March 26, 2015 01:29

March 26, 2015 13:37

No, it's acceptable to change the SSH port, but remember to follow the guidelines here: SSH Hardening Thank you.

March 27, 2015 01:25

ok thank you cPanelMichael

acenetgeorge

March 27, 2015 13:42

Try adding your ip to the csf.ignore file. That will cause failures from your IP to not be watched by lfd checks, and you will not be blocked.

lfd Permanent Block (IP match in csf.allow, block may not work)

Comments

Didn't find what you were looking for?