The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CSR/LFD Question

Discussion in 'General Discussion' started by bmcpanel, Mar 6, 2007.

  1. bmcpanel

    bmcpanel Well-Known Member

    Jun 1, 2002
    Likes Received:
    Trophy Points:
    CSF/LFD Question

    CSF is a great product.

    I have a question about the logs though. It is a simple question, some might consider obvious. I, however, want to make sure I know what I am looking at.

    In CSF in Cpanel's WHM, when I click on the button PROCESS AND VIEW FIREWALL SUPPORT, and then click on the link to actually view the report after it has processed, I see entries like this.... (note, my actual server IP has been edited out with x.x.x.x )

    2 Mar 06 03:32:17 Mar 06 03:32:20 00:00:00:03 Firewall: *TCP_IN Blocked* tcp 49641 x.x.x.x 80 SYN
    4 Mar 06 03:31:44 Mar 06 03:32:05 00:00:00:21 Firewall: *TCP_IN Blocked* tcp 53783 x.x.x.x 80 SYN
    4 Mar 06 03:31:43 Mar 06 03:32:04 00:00:00:21 Firewall: *TCP_IN Blocked* tcp 46265 x.x.x.x 80 SYN
    1 Mar 06 03:31:28 - - Firewall: *TCP_IN Blocked* tcp 59288 x.x.x.x 80 SYN
    1 Mar 06 03:31:06 - - Firewall: *TCP_IN Blocked* tcp 56968 x.x.x.x 80 SYN

    In the logs above, I am assuming that the words ...

    Firewall: *TCP_IN Blocked*

    ... indicate that the IP is successfully blocked by the firewall. Am I correct?

    My second question is, why, on some of the entries, are the columns "END" and "INTERVAL" not-populated.

    Thanks for any help you can provide.
    #1 bmcpanel, Mar 6, 2007
    Last edited: Mar 6, 2007

Share This Page