{"id":4372,"date":"2012-02-13T07:19:58","date_gmt":"2012-02-13T12:19:58","guid":{"rendered":"http:\/\/g33kinfo.com\/info\/?p=4372"},"modified":"2012-02-13T07:19:58","modified_gmt":"2012-02-13T12:19:58","slug":"csflfd-install-guide-for-plesk","status":"publish","type":"post","link":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/","title":{"rendered":"CSF\/LFD install guide for Plesk"},"content":{"rendered":"

From diademblogs.com<\/a><\/p>\n

Config Server Firewall (csf) and Login Failure Daemon (lfd) is a robust firewall solution having Stateful Packet Inspection (SPI), Login\/Intrusion Detection and Security application for Linux servers. Although it is more compatible with CPanel we have been able to use the same for the Plesk hosting control panel also and it is running fine. Please visit the below link for more information.
\nFrom http:\/\/www.configserver.com<\/a><\/p>\n

I have listed the installation steps for CSF \/ LFD.Login to your server with \u2018root\u2019 user and issue below commands :
\nChange directory to either \/root or \/usr\/local\/src , which ever you normally use for such installations
\n cd \/usr\/local\/src<\/code>
\n[Remove any old source that might be present]<\/p>\n

Download and untar the source for installation
\n wget http:\/\/www.configserver.com\/free\/csf.tgz
\n tar -xzf csf.tgz<\/code><\/p>\n

Run installation script
\n cd csf
\n sh install.sh<\/code><\/p>\n

<\/p>\n

Once the installation complete, you can run the below scripts provided by vendor to check if your server\/vps has required iptables modules available :
\n perl \/etc\/csf\/csftest.pl<\/code><\/p>\n

CSF provides the script to remove the other popular combination I talked about above i.e. apf\/bfd, The below script will remove apf\/bfd from your server\/vps.
\n sh \/etc\/csf\/remove_apf_bfd.sh<\/code><\/p>\n

Common setting for incoming\/outgoing TCP\/IP and UDP connection.
\nETH_DEVICE = \u201ceth1?
\nETH_DEVICE_SKIP = \u201ceth0?
\n# Allow incoming TCP ports
\nTCP_IN = \u201c20,21,25,53,80,106,110,111,143,443,465,587,865,873,993,995,8443,8880?
\n# Allow outgoing TCP ports
\nTCP_OUT = \u201c20,21,22,25,80,110,443,43,873,8443?
\n# Allow incoming UDP ports
\nUDP_IN = \u201c53,111,123,230,631,859,862,2109,5353?
\n# Allow outgoing UDP ports
\n# To allow outgoing traceroute add 33434:33523 to this list
\nUDP_OUT = \u201c20,21,53,113,123,2109?
\n# Allow incoming PING
\nICMP_IN = \u201c1?
\n# Set the per IP address incoming ICMP packet rate
\n# To disable rate limiting set to \u201c0?
\nICMP_IN_RATE = \u201c0?
\n# Allow outgoing PING
\nICMP_OUT = \u201c1?
\n# Set the per IP address outgoing ICMP packet rate
\n# To disable rate limiting set to \u201c0?
\nICMP_OUT_RATE = \u201c0?
\n# Enable login failure detection daemon (lfd).
\nLF_DAEMON = \u201c1?<\/code><\/p>\n

For allowing Qmail in CSF alter below setting(s)
\nSMTP_BLOCK = \u201c1?
\nSMTP_ALLOWLOCAL = \u201c1?
\nSMTP_PORTS = \u201c25,587?
\nSMTP_ALLOWUSER = \u201cqmaild,qmaill,qmailp,qmailq,qmailr,qmails\u201d
\nSMTP_ALLOWGROUP = \u201cqmail,nofiles,mail,mailman\u201d<\/code><\/p>\n

Set CSF\/LFD reporting FROM\/TO ID as below [**** Need to set for Plesk]
\nLF_ALERT_TO = \u201csupportteam@domain.com\u201d
\nLF_ALERT_FROM = \u201ccsf_LFD@domain.com\u201d<\/code><\/p>\n

Allowing third party block list checking
\n# Enable IP range blocking using the DShield Block List at
\nLF_DSHIELD = \u201c86400?
\n# Enable IP range blocking using the Spamhaus DROP List at
\nLF_SPAMHAUS = \u201c86400?
\n# Enable IP range blocking using the BOGON List at
\nLF_BOGON = \u201c86400?<\/code><\/p>\n

Now Add the LFD ignore list for qmail\/plesk mail user\/process in csf.pignore file.
\n# vim \/etc\/csf\/csf.pignore
\n#### Custom for Plesk ####
\nuser:admin
\nexe:\/var\/qmail\/bin\/qmail-smtpd
\nexe:\/usr\/bin\/imapd
\nexe:\/var\/qmail\/bin\/qmail-queue
\nexe:\/usr\/bin\/pop3d
\nexe:\/var\/qmail\/bin\/qmail-send
\ncmd:qmail-send
\ncmd:\/usr\/bin\/pop3d Maildir
\ncmd:\/var\/qmail\/bin\/qmail-queue
\ncmd:\/var\/qmail\/bin\/qmail-smtpd \/var\/qmail\/bin\/smtp_auth \/var\/qmail\/bin\/true \/var\/qmail\/bin\/cmd5checkpw \/var\/qmail\/bin\/true
\ncmd:\/usr\/bin\/imapd Maildir
\nexe:\/var\/qmail\/bin\/qmail-rspawn
\ncmd:qmail-rspawn
\nexe:\/var\/qmail\/bin\/qmail-clean
\ncmd:qmail-clean
\nexe:\/usr\/sbin\/clamd
\ncmd:clamd
\nexe:\/var\/qmail\/bin\/splogger
\ncmd:splogger qmail
\nexe:\/var\/qmail\/bin\/qmail-remote.moved
\nuser:qmaill
\nuser:popuser
\nuser:qmaild
\nuser:qmails
\nuser:qmailr
\nuser:qmailq
\nuser:qscand
\nexe:\/usr\/sbin\/avahi-daemon
\nuser:avahi
\nexe:\/usr\/local\/sbin\/zabbix_agentd
\ncmd:\/usr\/local\/sbin\/zabbix_agentd
\nuser:zabbix
\nexe:\/usr\/bin\/sw-engine-cgi
\ncmd:\/usr\/bin\/sw-engine-cgi
\nuser:sso
\nexe:\/usr\/sbin\/sw-cp-serverd
\ncmd:\/usr\/sbin\/sw-cp-serverd -f \/etc\/sw-cp-server\/config
\nuser:sw-cp-server
\nexe:\/usr\/bin\/sw-engine-cgi
\ncmd:\/usr\/bin\/sw-engine-cgi -c \/usr\/local\/psa\/admin\/conf\/php.ini -d auto_prepend_file=auth.php3 -u psaadm
\nuser:psaadm
\nexe:\/usr\/libexec\/mysqld
\ncmd:\/usr\/libexec\/mysqld \u2013basedir=\/usr \u2013datadir=\/var\/lib\/mysql \u2013user=mysql \u2013pid-file=\/var\/run\/mysqld\/mysqld.pid \u2013skip-external-locking \u2013socket=\/var\/lib\/mysql\/mysql.sock
\nuser:mysql
\nexe:\/usr\/libexec\/hald-addon-acpi
\nexe:\/usr\/sbin\/hald
\ncmd:hald
\nuser:haldaemon
\nexe:\/usr\/bin\/postgres
\nuser:postgres
\nexe:\/sbin\/portmap
\ncmd:portmap
\nuser:rpc
\nexe:\/usr\/bin\/xfs
\ncmd:xfs -droppriv -daemon
\nuser:xfs
\nexe:\/usr\/bin\/python
\ncmd:\/usr\/bin\/python \/usr\/lib\/mailman\/bin\/qrunner \u2013runner=VirginRunner:0:1 -s
\nuser:mailman
\nexe:\/usr\/java\/jdk1.6.0_20\/bin\/java
\nuser:tomcat<\/code><\/p>\n

Note: You may need to add few more process\/user as per your requirement.<\/p>\n

To start CSF
\n csf -s<\/code><\/p>\n

Restart LFD
\n service lfd restart<\/code><\/p>\n

Installation is done, now check the website, mail and other services(s) and disable TESTING mode and restart CSF\/LFD
\n csf -r
\n service lfd restart<\/code><\/p>\n

I will list below some of very common commands you will need to use\/manage csf firewall :<\/p>\n

Enabling the firewall
\n csf \u2013enable OR
\n csf -e<\/code><\/p>\n

Disabling the firewall
\n csf \u2013disable
\n csf -x<\/code><\/p>\n

Starting firewall \/ applying rules
\n csf \u2013start
\n csf -s<\/code><\/p>\n

Stopping firewall \/ flushing rules
\n csf \u2013stop
\n csf -f<\/code><\/p>\n

Adding an IP in firewall
\n csf -d 2.3.4.5 \u201cReason for blocking the IP\u201d
\n csf \u2013deny 2.3.4.5 \u201cReason for blocking the IP\u201d<\/code>
\nwhere 2.3.4.5 is the IP you want to block.<\/p>\n

Removing IP from deny list
\n csf -dr 2.3.4.5<\/code><\/p>\n

From diademblogs.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

From diademblogs.com Config Server Firewall (csf) and Login Failure Daemon (lfd) is a robust firewall solution having Stateful Packet Inspection (SPI), Login\/Intrusion Detection and Security application for Linux servers. Although it is more compatible with CPanel we have been able to use the same for the Plesk hosting control panel also and it is running… <\/p>\n

Read More<\/i><\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-4372","post","type-post","status-publish","format-standard","hentry","category-plesk"],"yoast_head":"\nCSF\/LFD install guide for Plesk - Linux Shtuff<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CSF\/LFD install guide for Plesk - Linux Shtuff\" \/>\n<meta property=\"og:description\" content=\"From diademblogs.com Config Server Firewall (csf) and Login Failure Daemon (lfd) is a robust firewall solution having Stateful Packet Inspection (SPI), Login\/Intrusion Detection and Security application for Linux servers. Although it is more compatible with CPanel we have been able to use the same for the Plesk hosting control panel also and it is running... Read More\" \/>\n<meta property=\"og:url\" content=\"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/\" \/>\n<meta property=\"og:site_name\" content=\"Linux Shtuff\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/fb.me\/g33kinf0\" \/>\n<meta property=\"article:author\" content=\"https:\/\/fb.me\/g33kinf0\" \/>\n<meta property=\"article:published_time\" content=\"2012-02-13T12:19:58+00:00\" \/>\n<meta name=\"author\" content=\"g33kadmin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/drsinger1111\" \/>\n<meta name=\"twitter:site\" content=\"@drsinger1111\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/\"},\"author\":{\"name\":\"g33kadmin\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\"},\"headline\":\"CSF\\\/LFD install guide for Plesk\",\"datePublished\":\"2012-02-13T12:19:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/\"},\"wordCount\":331,\"publisher\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\"},\"articleSection\":[\"Plesk\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/\",\"url\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/\",\"name\":\"CSF\\\/LFD install guide for Plesk - Linux Shtuff\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#website\"},\"datePublished\":\"2012-02-13T12:19:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/csflfd-install-guide-for-plesk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CSF\\\/LFD install guide for Plesk\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#website\",\"url\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/\",\"name\":\"Linux Shtuff\",\"description\":\"Because I have CRS Syndrome...\",\"publisher\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/#\\\/schema\\\/person\\\/c022e4c40b13ea1b678e6f020756f547\",\"name\":\"g33kadmin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\",\"url\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\",\"contentUrl\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\",\"width\":512,\"height\":512,\"caption\":\"g33kadmin\"},\"logo\":{\"@id\":\"https:\\\/\\\/g33kinfo.com\\\/info\\\/wp-content\\\/uploads\\\/2022\\\/07\\\/minion-researchA.gif\"},\"description\":\"I am a g33k, Linux blogger, developer, student and Tech Writer for Liquidweb.com\\\/kb. My passion for all things tech drives my hunt for all the coolz. I often need a vacation after I get back from vacation....\",\"sameAs\":[\"https:\\\/\\\/thelinuxreport.com\",\"https:\\\/\\\/fb.me\\\/g33kinf0\",\"https:\\\/\\\/x.com\\\/https:\\\/\\\/twitter.com\\\/drsinger1111\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CSF\/LFD install guide for Plesk - Linux Shtuff","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/","og_locale":"en_US","og_type":"article","og_title":"CSF\/LFD install guide for Plesk - Linux Shtuff","og_description":"From diademblogs.com Config Server Firewall (csf) and Login Failure Daemon (lfd) is a robust firewall solution having Stateful Packet Inspection (SPI), Login\/Intrusion Detection and Security application for Linux servers. Although it is more compatible with CPanel we have been able to use the same for the Plesk hosting control panel also and it is running... Read More","og_url":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/","og_site_name":"Linux Shtuff","article_publisher":"https:\/\/fb.me\/g33kinf0","article_author":"https:\/\/fb.me\/g33kinf0","article_published_time":"2012-02-13T12:19:58+00:00","author":"g33kadmin","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/drsinger1111","twitter_site":"@drsinger1111","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/#article","isPartOf":{"@id":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/"},"author":{"name":"g33kadmin","@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547"},"headline":"CSF\/LFD install guide for Plesk","datePublished":"2012-02-13T12:19:58+00:00","mainEntityOfPage":{"@id":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/"},"wordCount":331,"publisher":{"@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547"},"articleSection":["Plesk"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/","url":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/","name":"CSF\/LFD install guide for Plesk - Linux Shtuff","isPartOf":{"@id":"https:\/\/g33kinfo.com\/info\/#website"},"datePublished":"2012-02-13T12:19:58+00:00","breadcrumb":{"@id":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/g33kinfo.com\/info\/csflfd-install-guide-for-plesk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/g33kinfo.com\/info\/"},{"@type":"ListItem","position":2,"name":"CSF\/LFD install guide for Plesk"}]},{"@type":"WebSite","@id":"https:\/\/g33kinfo.com\/info\/#website","url":"https:\/\/g33kinfo.com\/info\/","name":"Linux Shtuff","description":"Because I have CRS Syndrome...","publisher":{"@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/g33kinfo.com\/info\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/g33kinfo.com\/info\/#\/schema\/person\/c022e4c40b13ea1b678e6f020756f547","name":"g33kadmin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif","url":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif","contentUrl":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif","width":512,"height":512,"caption":"g33kadmin"},"logo":{"@id":"https:\/\/g33kinfo.com\/info\/wp-content\/uploads\/2022\/07\/minion-researchA.gif"},"description":"I am a g33k, Linux blogger, developer, student and Tech Writer for Liquidweb.com\/kb. My passion for all things tech drives my hunt for all the coolz. I often need a vacation after I get back from vacation....","sameAs":["https:\/\/thelinuxreport.com","https:\/\/fb.me\/g33kinf0","https:\/\/x.com\/https:\/\/twitter.com\/drsinger1111"]}]}},"_links":{"self":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/posts\/4372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/comments?post=4372"}],"version-history":[{"count":0,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/posts\/4372\/revisions"}],"wp:attachment":[{"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/media?parent=4372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/categories?post=4372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/g33kinfo.com\/info\/wp-json\/wp\/v2\/tags?post=4372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}