Search found 810 matches

by Sergio
24 Jun 2021, 13:45
Forum: General Discussion (csf)
Topic: Problem with IPSET
Replies: 1
Views: 44

Re: Problem with IPSET

Hi.
What error you receive when running the following command:
yum install ipset
?
by Sergio
12 Jun 2021, 14:36
Forum: MailScanner Front-End
Topic: How to white list dmarc domain?
Replies: 0
Views: 51

How to white list dmarc domain?

Hello, Sarah. On my server I have blocked some file extensions and .gz was one of them. Unfortunately a few companies that send DMARC reports uses .gz files and are blocked by MailScanner. Is there a way to create a kind of filetype.whitelist.rules and add in there the external domains? Example: Fro...
by Sergio
26 May 2021, 05:57
Forum: MailScanner Front-End
Topic: reject at smtp time
Replies: 4
Views: 4162

Re: reject at smtp time

If you are using cPanel/WHM you can add domains to the "Filter Incoming Emails by Domain" as this filter is at EXIM stage. You can add in there any domain you want and you can use wildcards like per example: *.acems1.com or blocking domain extensions, per example *.tk or just a plain domai...
by Sergio
19 May 2021, 16:34
Forum: General Discussion (csf)
Topic: CSF / Asterisk
Replies: 36
Views: 16997

Re: CSF / Asterisk

Thank you!
If you could change to Sergio C, it will be great as I am not related in any way to CSF, I am just a member of the Forum that likes a lot CSF that I think is a great FireWall.

Sergio
by Sergio
19 May 2021, 16:05
Forum: General Discussion (csf)
Topic: Turn off Excessive resource usage email notification
Replies: 3
Views: 507

Re: Turn off Excessive resource usage email notification

Ok, then do the following: - Using webmail enter into the email address where you receive the emails. - On the main page, enter into "Email Filtering". - Enter into Create New Filter. - On the following page on the first line write a name for the filter you are creating. - On the next line...
by Sergio
19 May 2021, 15:09
Forum: General Discussion (csf)
Topic: Logs
Replies: 3
Views: 577

Re: Logs

You should :)
the one that is installed by ConfigServer is a great tool.

Ok, then in CSF under the "Search System Logs", try to find the IP.
Also, you can search for the IP on the ModSecurity area of your server.
by Sergio
19 May 2021, 15:03
Forum: General Discussion (csf)
Topic: CSF / Asterisk
Replies: 36
Views: 16997

Re: CSF / Asterisk

Here is the new rule but before using it, please read the disclaimer: "I don't assume any responsibility if you use the following rule, use it at your own discretion." Please, before using it made some test to see if it works for you. Also, if you see that the rule works for you, please do...
by Sergio
19 May 2021, 07:02
Forum: General Discussion (csf)
Topic: Custom Regex for Postfix SASL Auth attacks
Replies: 1
Views: 676

Re: Custom Regex for Postfix SASL Auth attacks

Hi. Try this one: if (($globlogs{CUSTOM1_LOG}{$lgfile}) and ($line =/^\S+\s+\S+\s+\S+ myserver postfix\/smtps\/smtpd\[\d+\]\: warning\: unknown\[(\S+)\]\: SASL LOGIN authentication failed\: \S+/)) { return ("Failed SASL login from",$1,"SecmasSASL","1","","...
by Sergio
19 May 2021, 06:44
Forum: General Discussion (csf)
Topic: CSF / Asterisk
Replies: 36
Views: 16997

Re: CSF / Asterisk

Hi, all.
Wow 7 years ago around the same day, how fast time pass by.
How many people are using my rule? That will be great to know.

In order to create a new rule I need:
- a few log lines of the error message(s).
- what info should the rule show when it is added to CSF?

Sergio