Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

CSR/LFD Question

Discussion in 'General Discussion' started by bmcpanel, Mar 6, 2007.

  1. bmcpanel

    bmcpanel Well-Known Member

    Jun 1, 2002
    Likes Received:
    Trophy Points:
    CSF/LFD Question

    CSF is a great product.

    I have a question about the logs though. It is a simple question, some might consider obvious. I, however, want to make sure I know what I am looking at.

    In CSF in Cpanel's WHM, when I click on the button PROCESS AND VIEW FIREWALL SUPPORT, and then click on the link to actually view the report after it has processed, I see entries like this.... (note, my actual server IP has been edited out with x.x.x.x )

    2 Mar 06 03:32:17 Mar 06 03:32:20 00:00:00:03 Firewall: *TCP_IN Blocked* tcp 49641 x.x.x.x 80 SYN
    4 Mar 06 03:31:44 Mar 06 03:32:05 00:00:00:21 Firewall: *TCP_IN Blocked* tcp 53783 x.x.x.x 80 SYN
    4 Mar 06 03:31:43 Mar 06 03:32:04 00:00:00:21 Firewall: *TCP_IN Blocked* tcp 46265 x.x.x.x 80 SYN
    1 Mar 06 03:31:28 - - Firewall: *TCP_IN Blocked* tcp 59288 x.x.x.x 80 SYN
    1 Mar 06 03:31:06 - - Firewall: *TCP_IN Blocked* tcp 56968 x.x.x.x 80 SYN

    In the logs above, I am assuming that the words ...

    Firewall: *TCP_IN Blocked*

    ... indicate that the IP is successfully blocked by the firewall. Am I correct?

    My second question is, why, on some of the entries, are the columns "END" and "INTERVAL" not-populated.

    Thanks for any help you can provide.
    #1 bmcpanel, Mar 6, 2007
    Last edited: Mar 6, 2007

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice