Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2018-02-24, 12:53:40

Author Topic: LxGuard???  (Read 2460 times)

0 Members and 1 Guest are viewing this topic.

Offline chrisf

  • Senior Master
  • **
  • Posts: 883
  • Karma: +11/-1
  • Gender: Male
  • Be the change that you wish to see in the world.
    • View Profile
    • Conviction's Hosting
LxGuard???
« on: 2013-07-15, 20:53:06 »
Does LxGuard work???  This is the alert email sent to me from CSF firewall:

IP:       218.145.71.229 (KR/Korea, Republic of/freeto.net)
Failures: 10 (ftpd)
Interval: 3600 seconds
Blocked:  Permanent Block
Log entries:
Jul 15 00:24:02 server2 pure-ftpd: (?@218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:24:09 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:24:21 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:24:33 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:24:45 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:24:49 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:24:53 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:25:04 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:25:13 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]
Jul 15 00:25:18 server2 pure-ftpd: (?@ 218.145.71.229) [WARNING]
Authentication failed for user [administrator]

LxGuard is set to 5 wrong attempts.  CSF is set to 10.  LxGuard NEVER blocked this attempt.

This is a serious problem for those who are not using CSF and are depending on LxGuard.
« Last Edit: 1970-01-01, 01:00:00 by Guest »
Christopher

Knowledge in: PHP, Perl, MySQL, Javascript, Actionscript, FLASH, HTML, CSS
Server Administrator / Developer: https://convictionshosting.com

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +113/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: LxGuard???
« Reply #1 on: 2013-07-15, 21:42:12 »
I am not using CSF and IPTables.

This VPS blocked 78 IPs for trying ssh access by lxguard. So, lxguard work perfectly.
« Last Edit: 1970-01-01, 01:00:00 by Guest »
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline chrisf

  • Senior Master
  • **
  • Posts: 883
  • Karma: +11/-1
  • Gender: Male
  • Be the change that you wish to see in the world.
    • View Profile
    • Conviction's Hosting
Re: LxGuard???
« Reply #2 on: 2013-07-15, 21:52:40 »
Quote from: "MRatWork"
I am not using CSF and IPTables.

This VPS blocked 78 IPs for trying ssh access by lxguard. So, lxguard work perfectly.

Is there a way to test LxGuard or to make sure it is running?  I do not understand why CSF blocked the ftp hack and LxGuard did not.
« Last Edit: 1970-01-01, 01:00:00 by Guest »
Christopher

Knowledge in: PHP, Perl, MySQL, Javascript, Actionscript, FLASH, HTML, CSS
Server Administrator / Developer: https://convictionshosting.com

Offline chrisf

  • Senior Master
  • **
  • Posts: 883
  • Karma: +11/-1
  • Gender: Male
  • Be the change that you wish to see in the world.
    • View Profile
    • Conviction's Hosting
Re: LxGuard???
« Reply #3 on: 2013-07-19, 00:49:16 »
Mustafa - how to confirm LxGuard is working?  I think it is broken.  I ask because I just got another block from CSF on SSH after 10 wrong password attempts.

LxGuard is set to 5!

Something is not right with LxGuard or the rate at which it checks is slower than CSF?

Please advise
« Last Edit: 1970-01-01, 01:00:00 by Guest »
Christopher

Knowledge in: PHP, Perl, MySQL, Javascript, Actionscript, FLASH, HTML, CSS
Server Administrator / Developer: https://convictionshosting.com

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +113/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: LxGuard???
« Reply #4 on: 2013-07-19, 01:13:40 »
Did you see in 'Admin > servers > (choose server) > LxGuard > Connections' and 'Raw connections' for blocked IPs?.
« Last Edit: 1970-01-01, 01:00:00 by Guest »
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline chrisf

  • Senior Master
  • **
  • Posts: 883
  • Karma: +11/-1
  • Gender: Male
  • Be the change that you wish to see in the world.
    • View Profile
    • Conviction's Hosting
Re: LxGuard???
« Reply #5 on: 2013-07-19, 06:01:52 »
I have two servers - neither server LxGuard is appearing to work.

I clustered my CSF so it will block ip on both servers for any attack attempt.

Server 1 has blocked 4 attempts (10 wrong password attempts)

Sever 2 has blocked 2 attempts (10 wrong password attempts)

LxGuard is set to 5 on both servers.  Nothing listed in Blocked Hosts, Connections, or Raw Connections.

CSF is protecting my servers.
« Last Edit: 1970-01-01, 01:00:00 by Guest »
Christopher

Knowledge in: PHP, Perl, MySQL, Javascript, Actionscript, FLASH, HTML, CSS
Server Administrator / Developer: https://convictionshosting.com

Offline hilfans

  • Junior Member
  • *
  • Posts: 26
  • Karma: +0/-0
    • View Profile
    • Just Shared
Re: LxGuard???
« Reply #6 on: 2017-12-08, 10:55:14 »
I want to know how to clear log on table Raw Connections at LxGuard? (LxGuard >> Raw Connections).

I'm already cleanup all log at var/log, but the table is still display the log activity.

 


MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix
Click Here

Page created in 0.044 seconds with 18 queries.

web stats analysis