ConfigServer Community Forum

Hi I use 2 methods together for this problem, a wordpress plugin called limit-login-attempts and a htaccess file setup to stop any login attempt that is not refered from a hidden link page on the site, this stops scripts from direct accessing the login page. CSF is not used, wordpress is attacked so...

Hi I have LF_DISTATTACK and and LF_SMTPAUTH SSL isn't really a option my customers are mostly computer illiterate and would panic. My problem has been that the number of IPs in the botnet exceeds what the firewall could handle so as new bot IPs were added to the block list other bots were dropped of...

DA has Brute Force Monitor
http://directadmin.com/features.php?id=1227
With csf
http://forum.directadmin.com/showthread.php?t=44839

Unfortunately I have no experience with DA
you may have to open a support ticket .

Its not part of the firewall look in Cpanel security menu 3rd section from top cphulk default settings are ok for most of the time, but when a attack starts filling the fire wall too quickly, the settings below work for me but you must whitelist your ip. IP Based Brute Force Protection Period in min...

You may have to wait until someone with more knowledge than me to answer In the mean time if this is a major worry My suggestion is to use cphulk as well as csf and whitelist your ip address in cphulk then tighten the cphulk settings I have had large botnet attacks and the combination of cphulk and ...

That is strange then A firewall that doesn't block ips is just a log that will make you paranoid. I know it a stupid question but at the top of firewall configuration is TESTING set to 0 and did you restart csf after adding ips. Other settings that could be the problem are in the Login Failure Block...

Check the number of denied ips in csf frontend
then to see if it up to the limit
click firewall configuration
in the dropdown box at the top choose general settings
scroll down to DENY_IP_LIMIT , the default is 200
I don't use more than 500 if I can avoid it.

It must be a csf setting
what is your permanent deny limit set to.

One of you users has sent a email with over 100 cc or bcc email recipient addresses