Search found 11 matches

by Linuc
05 Aug 2020, 13:27
Forum: MailScanner
Topic: URIBL_ not enabled
Replies: 1
Views: 4156

URIBL_ not enabled

Hi guys, We have about 30 servers, all of them run MailScanner and MSFE. The majority of them correctly scan mail and the SPAM Report will show grey list etc.. Some servers had URIBL_BLOCKED which we easily fixed with setting dns_server 127.0.0.1 Our issue is that a number of other servers do not re...
by Linuc
31 May 2020, 12:02
Forum: MailScanner Front-End
Topic: Update rules for multiple servers
Replies: 1
Views: 2904

Update rules for multiple servers

We run MailScanner and MFE on around 30 servers and always have an issue if we need to make a change, particularly to the following 2 files: spam.whitelist.rules spam.blacklist.rules We get the same SPAM on all servers so I am thinking about a way to populate the rules to all servers. So far I am th...
by Linuc
12 Feb 2018, 11:46
Forum: General Discussion (cxs)
Topic: Where to scan issue
Replies: 3
Views: 4630

Re: Where to scan issue

Do I pass this parameter only when doing a scheduled scan or do I add --allusers in the cxswatch.conf file?
by Linuc
12 Feb 2018, 07:23
Forum: General Discussion (cxs)
Topic: Where to scan issue
Replies: 3
Views: 4630

Where to scan issue

So my issue is the following: In CXS 8 the very first option is: What to scan: If scanning a user, only scan within in the web root (e.g. ~user/public_html/) Now, WHM Teak Settings has: "Restrict document roots to public_html" which we have set to "Disabled" on all 25 production ...
by Linuc
28 Aug 2017, 07:53
Forum: MailScanner Front-End
Topic: MailWatch
Replies: 1
Views: 2949

MailWatch

Hi,

We really miss MailWatch.

Any way this will come back in future?
by Linuc
22 Jun 2017, 18:52
Forum: General Discussion (csf)
Topic: Can't block connections
Replies: 2
Views: 3351

Can't block connections

Hi, I am seeing an attack on exim port 25, as per: 2017-06-22 19:43:43 SMTP connection from [201.197.40.70]:13855 (TCP/IP connection count = 84) 2017-06-22 19:43:43 SMTP connection from [197.253.12.194]:18356 (TCP/IP connection count = 85) 2017-06-22 19:43:44 SMTP connection from [89.211.189.109]:55...
by Linuc
15 Feb 2017, 05:31
Forum: General Discussion (csf)
Topic: Total network drop
Replies: 4
Views: 4288

Re: Total network drop

We have about 30 servers, our techs are convinced it has something to do with the GeoIP, as we have other services which also relies on GeoIP that are broken and there are some rules in CSF which also requires this to function 100% Note, we are not saying there is an issue with CSF, rather the GeoIP...
by Linuc
14 Feb 2017, 12:53
Forum: General Discussion (csf)
Topic: Total network drop
Replies: 4
Views: 4288

Re: Total network drop

Hmmmm.

Strange, we also experienced the exact same issue today and CSF is disabled at this time.
by Linuc
07 Jan 2016, 08:41
Forum: General Discussion (cmc)
Topic: ModSecurity features in cPanel 11.46
Replies: 3
Views: 9320

Re: ModSecurity features in cPanel 11.46

We make use of the ModSecurity feature and OWASP provided by cPanel. We also make use of the ConfigServer ModSecurity Control. The problem is that whitelisting is not working. You can select an account -> modify user whitelist And then add a rule from ModSecurity OWASP, like 970901 It will not ignor...
by Linuc
11 Oct 2015, 19:42
Forum: MailScanner
Topic: Clamav on CentOS 7
Replies: 2
Views: 4814

Re: Clamav on CentOS 7

Hi Sarah,

Thank you very much!