Welcome to Centmin Mod Community
Register Now

CSF No longer sending SSH login alert on newly set up VPS

Discussion in 'Other Centmin Mod Installed software' started by dorobo, Nov 9, 2016.

Tags:
  1. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    8:51 PM
    latest
    latest
    I've used the same set up for a long time now using a bash script with centminmod. I'm also using mailgun.

    I've noticed now whenever I login as root the LFD is no longer sending alert on a NEWLY set up vps.

    If I test sending email using

    Code (Text):
    echo "My message" | mail -s subject myemail@email.com


    and

    Code (Text):
    echo "My message" | mail -s subject root


    the email arrives on my inbox

    but when I login as using PuTTY or WinSCP no email arrives. Not on the inbox, spam, or trash.

    There's nothing in /var/mail/maillog that it bounced or an error. It looks like no email was even attempted to be sent at all.

    I've compared the csf.conf of my old and the newly setup VPS and the only difference between the 2 are:

    [​IMG]

    LF_EMAIL_ALERT is # Send an email alert if an IP address is blocked by one of the [*] triggers Nonetheless it's set to 1 in the new and still no email.

    LF_ALERT_TO = "myemail@email.com"

    service csf status
    service lfd status

    both are active (running)

    Tried restarting both as well.

    SSH login alert works on the old VPS

    It's the same on Linode, DO, Vultr


    :unsure: :confused: :(
     
  2. eva2000

    eva2000 Administrator Staff Member

    54,909
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    10:51 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    what versions of centmin mod ? 123.08stable or 123.09beta01 ? have both been recently updated via centmin.sh menu option 23 ?

    anything in your spam/junk inbox ?
     
  3. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    8:51 PM
    latest
    latest
    ok found out the answer :D

    this is in my lfd.log

    Code (Text):
    *SSH login* from xx.xx.xx.xx into the root account using publickey authentication - ignored


    xx.xx.xx.xx is in csf.ignore

    now I feel stupid LOL
     
  4. eva2000

    eva2000 Administrator Staff Member

    54,909
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    10:51 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    ah that maybe it you whitelisted your ip in csf.ignore :)

    if you remove ip from csf.ignore do you get emails again ?
     
  5. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    8:51 PM
    latest
    latest
    tried logging using a VPN

    and got the email :D
     
  6. eva2000

    eva2000 Administrator Staff Member

    54,909
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    10:51 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    nice.. definitely one for the Centmin Mod Insights forum :)
     
  7. dorobo

    dorobo Active Member

    420
    104
    43
    Jun 6, 2014
    Ratings:
    +162
    Local Time:
    8:51 PM
    latest
    latest
    more like centminmod bloopers haha