0 Members and 2 Guests are viewing this topic.
exe:/usr/bin/tcpserverexe:/var/qmail/bin/sploggerpexe:/var/qmail/bin/qmail.* <---------------is this correct pexe:/var/qmail/bin/qmail.*exe:/usr/bin/freshclamexe:/usr/sbin/clamdexe:/usr/libexec/mysqldexe:/usr/sbin/httpdexe:/usr/sbin/hiawathaexe:/usr/sbin/nginxexe:/bin/tinydnspcmd:php-fpm: pool .*cmd:spamd child
I'm now getting a lot of suspicious file alerts, ?, 9in total since I installed CSF.The latest one is File: /tmp/%%0B/0B2/0B2F7F61%%login.htm.phpIve looked in tmp folder and they are other folders:%%0B%%47%%76%%BEDoes anybody know whats going on here?
In KloxoMR latest, one of the webmail clients is using the /tmp/ directory to compile and cache web output (smarty template system - I think).CSF does not like php files being in the /tmp and will start sending you mass emails.This will fix that <!-- s:) --><!-- s:) -->Code: [Select]vim /etc/csf/csf.fignoreADD this to the bottomCode: [Select]/tmp/%.*Done.
vim /etc/csf/csf.fignore
/tmp/%.*
Page created in 0.033 seconds with 22 queries.