Does csf monitor postfix logs for SMTP port attackers, to be blocked ?
I need for postfix on my servers. See alot of repeated attackers, making for much of the traffic in a day
Search found 5 matches
- 22 Sep 2015, 02:24
- Forum: General Discussion (csf)
- Topic: does csf monitor postfix log ?
- Replies: 1
- Views: 2698
- 25 Nov 2014, 03:58
- Forum: General Discussion (csf)
- Topic: Does csf/lfd check on number of ftp connects/disconnects
- Replies: 3
- Views: 3727
Re: Does csf/lfd check on number of ftp connects/disconnects
Fixed this on my own.
csf was configured to look at the wrong log file for checking FTP authentication violations. Fixed that. Its working like a charm since.
csf was configured to look at the wrong log file for checking FTP authentication violations. Fixed that. Its working like a charm since.
- 21 Nov 2014, 11:18
- Forum: General Discussion (csf)
- Topic: Does csf/lfd check on number of ftp connects/disconnects
- Replies: 3
- Views: 3727
Re: Does csf/lfd check on number of ftp connects/disconnects
csf if watching /var/log/secure. But not banning IPs that are failing authentication repeatedly
- 21 Nov 2014, 11:11
- Forum: General Discussion (csf)
- Topic: Does csf/lfd check on number of ftp connects/disconnects
- Replies: 3
- Views: 3727
Re: Does csf/lfd check on number of ftp connects/disconnects
csf/lfd did nothing to stop or log these; I have more FTP port attacks; Nov 21 08:41:58 server-name proftpd[18359]: xxx.xx.xxx.xx (118.250.11.62[118.250.11.62]) - USER wwwusername.comau: no such user found from 118.250.11.62 [118.250.11.62] to ::ffff:xxx.xx.xxx.xx:21 Nov 21 08:42:19 server-name prof...
- 13 Nov 2014, 05:10
- Forum: General Discussion (csf)
- Topic: Does csf/lfd check on number of ftp connects/disconnects
- Replies: 3
- Views: 3727
Does csf/lfd check on number of ftp connects/disconnects
Hello, With LF_FTPD does csf/lfd check number of connects/disconnects on FTP port ? I have 722 lines of connects disconnects inside a 10 min period that happened today (13-Nov-2014). csf/lfd was running when this attack took place. I might have left something out in csf/lfd config for this to be dea...