Home · Latest · Trends  /  Plain Text
7

CSF block force attacks on Exim

rated 7 times [  7] [ 0]  / comments: 0 / hits: 1700  / 2 years ago, mon, jun 26, 2017, 09:21:15
CSF / LFD block force attacks on Exim Centos
1. Backup /etc/csf/csf.conf

2. Make sure this exist in /etc/csf/csf.conf

LF_DAEMON = "1"
LF_CSF = "1"
SMTP_BLOCK = "1"
SMTPAUTH_LOG = "/var/log/exim/reject.log" SMTPRELAY_LOG = "/var/log/exim_mainlog" POP3D_LOG = "/var/log/maillog" IMAPD_LOG = "/var/log/maillog" SCRIPT_LOG = "/var/log/exim_mainlog"
If reject.log not exist replace with log file with "Incorrect authentication data" messages 3. Restart LFD
csf --lfd restart
4. Restart csf
csf -r
Output in /etc/csf/csf.deny
212.129.11.11 # lfd: (smtpauth) Failed SMTP AUTH login from 212.129.11.11<br />(FR/France/212-129-63-54.example.com): 5 in the last 3600 secs - Mon Jun 26 08:10:47 2017
More From » Plain Text
 

Comments

There are no comments for this Snippet yet
Only authorized users can post. Please sign in first, or register a free account
 
Share
Snippets
Install SpamAssassin and Exim on a CentOS
3 years ago, thu, sep 8, 2016
Common SSH commands for CSF [ConfigServer]
2 years ago, wed, dec 28, 2016
Simple CSS javascript social share buttons
2 years ago, tue, jan 3, 2017
Basic ClamAV antivirus engine SSH command line commands
2 years ago, thu, jan 19, 2017
How to leverage browser caching with htaccess
2 years ago, sat, jun 10, 2017
Basic SSH Exim mail queue commands
2 years ago, sat, sep 2, 2017
1 year ago, tue, feb 27, 2018
1 year ago, wed, feb 28, 2018
Sponsor
Posted
paki

paki

Member since Sep 7, 2016
Total Code Snippets: 10
Total Comments: 0
Location: n/a
Following
User not following anyone yet.