Viewing articles tagged 'lsf'

 What is Lion Server Firewall

Lion Server Firewall (LSF) v3.2.0 is the host firewall on Lionhost WHM/cPanel servers (and...

 Where do I find LSF in WHM

Log in to WHM as root. Plugins → Lion Server Firewall (or search for Lion / LSF). Tabs:...

 Site / cPanel / mail down only from my network

If the site, cPanel or mail is down only from your network but works from mobile data, your...

 How to whitelist or blacklist an IP in LSF

WHM → Lion Server Firewall → Overview or Firewall → IP / CIDR. Allow — permanent trust...

 Can I run LSF and CSF together?

No. Do not run LSF and CSF together. Both write netfilter rules; the combination causes conflicts...

 LSF TESTING and NORMAL mode

TESTING=1 (default) — rules auto-flush after 300 seconds if something goes wrong. NORMAL — rules...

 Locked out of the server by LSF

TESTING mode: wait up to 5 minutes for the auto-flush. Lionhost KVM / VNC / IPMI as root: lsf...

 Which ports does Lion Server Firewall open

Default TCP_IN: 20, 21, 22, 25, 26, 53, 80, 110, 143, 443, 465, 587, 993, 995, 2082, 2083, 2086,...

 LFD and PSAD — brute force and port scans

LFD watches SSH, FTP, mail, Exim, cPanel and ModSecurity failures. Default: 5 hits in 300 seconds...

 LSF WAF false positive

LSF does not replace WHM → ModSecurity Vendors (OWASP CRS / Atomicorp). It loads a supplementary...

 GeoIP country blocking in LSF

CC_DENY="CN,RU,KP" CC_ALLOW="GR,CY,DE" CC_DENY drops all inbound from those countries. CC_ALLOW...

 Cloudflare and BunnyCDN origin lock

Origin lock accepts HTTP/HTTPS only from official CDN ranges. Direct hits to the server IP on...

 DDoS protection on Lion Server Firewall

LSF is host L3/L4 protection, not network scrubbing and not a replacement for Cloudflare....

 LSF health check

WHM → Lion Server Firewall → Health, or Overview → Run diagnostic, or lsf --check. It tests the...

 Lion Server Firewall CLI commands

Run as root. lsf -e / lsf -x # enable / disable lsf -s / lsf -l # status / rules...

 [STAFF] LSF ticket reply

STAFF ONLY — do not publish. Ask for the customer public IP. lsf --search IP or Simulator. lsf...