ConfigServer Community Forum

Yes, you can easily block domains using WHM option:
Filter Incoming Emails by Domain

In there write:
*.from-dc.com
*.from-in.com
*.from-ky.com
*.from-mn.com
*.from-nv.com
from-pa.com
from-vt.com

That wil block any email that uses that domains.

Sergio

You can implement your own script to do that and a lot of other things; in your CSF check for the following: Block Reporting. lfd can run an external script when it performs and (sic) IP address block following for example a login failure. The following setting is to the full path of the external sc...

Sorry if that didn't help. But in there you can read a complete info about CloudFlare, that may be can give you a light on what else you could check. My apologize in trying to help you. 27. CloudFlare ############## This features provides interaction with the CloudFlare Firewall. As CloudFlare is a ...

This would be a great addition to MailScanner FE.

Please Sarah and Jonathan, Could you please check this and see if this could be added on the next MFE update? It will be a nice tool for fighting against PHISHING.

Regards,
Sergio

Have you tried to add MAILGUN IPs in CSF white list?

Check https://www.webhostingtalk.com/showthread.php?t=1683550
read the 3rd post that will give you idea on how to get MAILGUN IPS

Sergio

Hi. Go to CSF, then go to "LFD BLOCKLISTS", look in there the blocklists that you are using. Check if the IP is blocked by any of the BLOCK LISTS that you are using, to do that go to /var/lib/csf and search the IP on all the /var/lib/csf/csf.block.NAME black lists in there. The next step w...

Hi.
Please read https://download.configserver.com/csf/readme.txt
maybe some of your questions will be answered there.

Sergio

Hi. This area is not to resolve doubts about REGEX rules, please use the regular forum.
When you move your question to that area I will answer it there, thank you.
Sergio

Are you using ModSecurity?
Does ModSecurity gives you the rule number that the offending IPs are triggering?
If so, then you can block the attacks in realtime creating your own CSF rules.

Sergio

The best thing is to create your own spamassassin rules for the spam that is not catched by MSFE and assign a very high score. Then create rules for CSF (firewall) to block the server that sent the spam and at last another CSF script to check if more that 10 IPs from the same IP range have been send...