Search found 12 matches

by gschaefer
13 Mar 2017, 06:01
Forum: General Discussion (csf)
Topic: Block brute force on wordpress wp-login ?
Replies: 12
Views: 27579

Re: Block brute force on wordpress wp-login ?

cPanel with WHM on Centos 7 64bit. Latest version of CSF is running. I will check everything again and ask my hosting provider as well and let you know. This is the correct path to my apache access log and so the entry in csf.conf is: CUSTOM4_LOG = "/usr/local/apache2/access_log" Have chec...
by gschaefer
12 Mar 2017, 02:22
Forum: General Discussion (csf)
Topic: Block brute force on wordpress wp-login ?
Replies: 12
Views: 27579

Re: Block brute force on wordpress wp-login ?

Sorry to report this but it's still not working. The botnet Wordpress login attempts are still happening and the IP's are not being added to CSF deny lists. I also have Wordfence and Brute Force Protection plugins installed on all my sites with extremely hard settings (1 attempt per 1 sec) and they ...
by gschaefer
11 Mar 2017, 22:11
Forum: General Discussion (csf)
Topic: Block brute force on wordpress wp-login ?
Replies: 12
Views: 27579

Re: Block brute force on wordpress wp-login ?

Many thanks for the update. Have changed the files again and restarted CSF. Will let you know how I go. My VPS server is getting hammered by a botnet trying to brute force wordpress passwords so anything I can do to reduce these attempts is useful..
by gschaefer
11 Mar 2017, 01:00
Forum: General Discussion (csf)
Topic: Block brute force on wordpress wp-login ?
Replies: 12
Views: 27579

Re: Block brute force on wordpress wp-login ?

I made those changes and restarted CSF but how can I tell if it's working?

I am still getting Wordfence alerts saying 'user xx tried to log in and has been blocked etc'
I can't see these IP's in the CSF deny IP lists.
by gschaefer
07 Nov 2016, 00:23
Forum: MailScanner
Topic: Low scoring spam not being deleted
Replies: 3
Views: 4928

Re: Low scoring spam not being deleted

I found the culprit. It was my blackhole settings for those domains. I had them set to discard not fail. Once i read your excellent article here I changed them and voila the low scoring spams are not being delivered!

https://configserver.com/free/fail.html
by gschaefer
06 Nov 2016, 11:12
Forum: MailScanner
Topic: Low scoring spam not being deleted
Replies: 3
Views: 4928

Re: Low scoring spam not being deleted

Yes Sarah they are actually being delivered. I checked the mailbox of the account before I posted this. I will create a ticket for this issue,
by gschaefer
06 Nov 2016, 11:03
Forum: MailScanner
Topic: Low scoring spam not being deleted
Replies: 3
Views: 4928

Low scoring spam not being deleted

i have the latest version of of MS and MSFE running under Centos and they are working fine except for this issue. I have set the default low scoring spam action to delete for all domains on my server and the the low score value to 5 however low scoring spam is still being delivered despite being sco...
by gschaefer
30 Aug 2016, 22:23
Forum: MailScanner Front-End
Topic: MSFE has stopped working in WHM
Replies: 3
Views: 4202

Re: MSFE has stopped working in WHM

My mistake I had added GB to the CSF country block list after a spate of hacking attempts and my VPS wasn't connecting to the ConfigServer licensing server(s) which are located in GB. All fixed.
by gschaefer
30 Aug 2016, 12:47
Forum: MailScanner Front-End
Topic: MSFE has stopped working in WHM
Replies: 3
Views: 4202

MSFE has stopped working in WHM

MSFE has been working fine on my VPS server since you guys did the install a year ago.

When I click on the WHM MSFE Option it just hangs
Have rebooted and restarted EXIM.

Anyone else having this problem?
by gschaefer
28 Jun 2016, 23:27
Forum: MailScanner
Topic: Can't open /var/log/clamav/freshclam.log in append mode
Replies: 3
Views: 7328

Re: Can't open /var/log/clamav/freshclam.log in append mode

I have the same problem after the latest update.

Where and how to remove this cronjob to remove it?