WP AutoShield®: One-Click WordPress Security from cPFence: Page 11 - Enhance Control Panel

WP AutoShield®: One-Click WordPress Security from cPFence

cPFence

That’s already possible from the Admin UI—all 46 WP-AutoShield tools can be run on all sites or just specific ones as you wish. Makes it super easy and flexible.

mbe81

cPFence
This morning I got the first automatic mail from the database malware scan. For just 10 WordPress sites it reports about 6000 lines as suspicious.

A lot of lines marked as SEO Spam, while it is no SEO Spam (and even if it is, SEO Spam is content which should be managed by the webmaster, not the system administrator). Only a few real SEO Spam lines were reported, but again, this is not something I care about as system administrator
A lot of lines that Javascript is detected on a page, which in this case, is all valid javascript from a newsletter provider added by the site owner.

So thanks for your effort here, but I disabled the database scan due to the number of false positives/ irrelevant checks.

cPFence

mbe81

Thank you for the feedback. We're aware of these false positives, and a fix is scheduled to be released later today. This update will refine the scan to focus solely on pure malware detections. Appreciate your patience.

cPFence

mbe81 rdbf

Can you please try a manual DB scan with the latest 3.3.33 version? You can use cpfence --bulk-scan-wp-databases or run it from the UI. Let us know how it goes. If you still notice any false alarms, please attach the log file to a support ticket.

We’ve tested this version on busy shared hosting servers, and it successfully detected all our known malware DB injection patterns while keeping false positives to a minimum.

cPFence

Version 3.3.33 (16th February 2025)

Added

Database whitelisting for database scan:
You can now whitelist specific WordPress databases from the daily malware scanning. This is useful for sites with known custom entries or large databases where scanning is not required.
- Admin UI: Edit Configuration Files → Manage Whitelisted Databases
- Add the full path of the WordPress installation.
- Manual file editing if needed: /opt/cpfence/user-config/cpfmrtp/whitelisted_databases.txt

Improved

Database Spam detections are now completely ignored, scanning will solely focus on malware and injection threats.
Email log attachments will now be capped at a maximum size of 5 MB for better deliverability.
Refined detection rules to eliminate all reported false positives, while keeping the scanner highly effective.

mbe81

cPFence

Scan completed successfully. No suspicious database entries were detected.

Much better! Thanks!

rdbf

cPFence

Scan completed successfully. No suspicious database entries were detected.

On all servers, so that's good!

cPFence

cPFence is packed with unique modules and features that you won’t find anywhere else, like full IPv6 support, advanced database scanning, MySQL governor, MonitorPro keyword monitoring, WP-AutoShield, and much more. These innovations have already caught the attention of smart system admins who switched to cPFence to leverage its power and unmatched feature set.

We’ve often said our goal is to make cPFence not just the best server security software, but the ultimate “Swiss knife” for every Enhance admin. But lately, it feels like that goal has evolved!.

cPFence is turning into a machine gun!, not just a Swiss knife. Wondering why? Meet our latest module:
cPFence ApiMachine – your new API-Driven Bulk Tools for Total Cluster Control.

ApiMachine is designed to save you countless hours by automating repetitive tasks across your entire Enhance cluster. Whether you manage dozens of sites or thousands, you can now apply critical changes cluster-wide or target specific servers, all from the Admin UI or the command line, with the power of the Enhance API.

Stop wasting time handling sites one by one. Let ApiMachine handle the heavy lifting.

Meet ApiMachine®: The Smartest Way to Manage Your Enhance Cluster

btraill

cPFence Excellent work. This looks like it will be quite useful!

MediaServe

cPFence Will ApiMachine work on Enhance v11?

Edit: Nope, took a look at the help and it's probably only usable on v12+ / cPFence 3.3.31+.

Wish it could be backported to v11 as I need to migrate at least 100 more websites before upgrading to v12.

Enabling DKIM and Redis is a pain!

slimx

cPFence
I think the star of the show is that BULK MAIL SSL tool 😃

Andreas

cPFence Where do you recommend you install and manage cpfence from? CP server or a web server?

cPFence

MediaServe Enabling DKIM and Redis is a pain!

With ApiMachine, you can do it with a single click and target either one server or even your entire cluster.

slimx I think the star of the show is that BULK MAIL SSL tool

Since we manage our own hosting servers, we know exactly what server admins really need. So we focused on adding the most useful tools, with plans to bring even more in the future.

Andreas Where do you recommend you install and manage cpfence from? CP server or a web server?

You’ll need to install cPFence on all your servers, but some features, like ApiMachine, will only work on your main control panel server.

Oldschool

Curious if anyone else has had this issue with cpfence and openlitespeedlogs filling the disk?
I installed cpfence last night and within 8hrs it filled about 850GBs in logs in the /var/local/enhance/openlitespeedlogs folder with error logs, all containing thousands of lines of this:
2025-03-19 01:24:26.002818 [ERROR] [186857] [:443] HttpListener::acceptConnection(): Accept failed😮peration not supported!
2025-03-19 01:24:26.002824 [ERROR] [186857] [ :443] HttpListener::acceptConnection(): Accept failed😮peration not supported!
2025-03-19 01:24:26.002829 [ERROR] [186857] [:443] HttpListener::acceptConnection(): Accept failed😮peration not supported!
2025-03-19 01:24:26.002834 [ERROR] [186857] [ :443] HttpListener::acceptConnection(): Accept failed😮peration not supported!

cPFence

Oldschool

This error suggests OpenLiteSpeed is struggling to accept new connections on port 443, which is definitely unusual. It could be a misconfiguration or something conflicting with how OLS handles connections. I just responded to your ticket, so we’ll check it out and get this sorted for you.

cPFence

Oldschool

You were missing the Listener for Port 443 in your OpenLiteSpeed configuration for some reason. This isn't related to cPFence, as we don’t modify these entries.

I’ve reset your OLS configurations to defaults, and everything should be working fine now.

Oldschool

cPFence
Just want to give a huge shout-out to cPfence, it appears it was unrelated but they quickly helped and resolved.

Kosta

cPFence can I know more about the license option where I need to specify IPs when purchasing. Would I be able to change server IPs if I need to or license is sticking only to IP addresses I present during purchase..
Thanks

cPFence

Kosta

You can always change the server IP in your license, whether it's a single-server, bulk, or per-website license. For single-server and per-website licenses, changing the IP is fully automated and self-service via your client area. For bulk licenses, just drop us a ticket, and we'll apply the changes for you.

cPFence

Version 3.3.45 (19th March 2025)

Added

- New tool: list all websites and UUIDs:

Easily retrieve and save a list of all website UUIDs for reference or management.

cpfence --list-website-uuids → Lists all website UUIDs and saves them to /var/log/cpfenceav/website-uuid-list.txt.

- New website resource monitor:

Monitor real-time resource usage (CPU, memory, and IO) for all or selected websites, with the ability to quickly search by UUID and owner usernames.

cpfence --website-resource-monitor → Track and analyze resource usage per website in real time.

Kosta

cPFence lol 24h after wegee posted a script for this you implement it into cpfance. Nice one!
I will purchase this weekend cpfance!

« Previous Page Next Page »