Hardening your TCP/IP Stack Against SYN Floods Denial of service (DoS) attacks launch via SYN floods can be very problematic for servers that are not properly configured to handle them. [...]
Applications that handle a huge number of TCP connections, either as a server, or as a client, will often see a large number of sockets in TIME_WAIT state. The sockets [...]
Executable:/usr/local/cpanel/3rdparty/bin/php-cgiCommand Line (often faked in exploits):/usr/local/cpanel/3rdparty/bin/php-cgi -c /usr/local/cpanel/3rdparty/etc/roundcube /usr/local/cpanel/base/3rdparty/roundcube/index.php Network connections by the process (if any): tcp: 127.0.0.1:48277 -> 127.0.0.1:143 Solution ====== vi /etc/csf/csf.pignore And add the below line pcmd:/usr/local/cpanel/3rdparty/bin/php-cgi -c /usr/local/cpanel/3rdparty/etc/roundcube /usr/local/cpanel/base/3rdparty/roundcube/index.php [...]
Allow Incoming Mysql Connection for Single ip in CSF In CSF firewall sometimes we only want to allow an IP through on a certain port like MySQL port 3306 without [...]
