Search found 21 matches

by JasGot
26 Oct 2020, 15:09
Forum: General Discussion (cxs)
Topic: Scanning on a non-existent file
Replies: 6
Views: 4094

Re: Scanning on a non-existent file

This is a nuisance for us too. 14 e-mails per hou about a file that doesn't exist.

/home/{account]/public_html/image.php

How can it detect a virus if there is no file?
by JasGot
24 Jun 2020, 14:50
Forum: General Discussion (csf)
Topic: Blocking connections without blocking e-mail
Replies: 11
Views: 2054

Re: Blocking connections without blocking e-mail

I would try this if it were reversed. I need to deny all. I can't list every port in that field.
by JasGot
15 Jun 2020, 14:46
Forum: General Discussion (csf)
Topic: Blocking connections without blocking e-mail
Replies: 11
Views: 2054

Re: Blocking connections without blocking e-mail

Those explanations often create more questions than they answer......
by JasGot
11 Jun 2020, 13:56
Forum: General Discussion (csf)
Topic: Blocking connections without blocking e-mail
Replies: 11
Views: 2054

Re: Blocking connections without blocking e-mail

Can you provide the specific CC_ option? I don't see one that allows me to include ports and CC; only ports OR CC_.
by JasGot
08 Jun 2020, 16:08
Forum: General Discussion (csf)
Topic: Blocking connections without blocking e-mail
Replies: 11
Views: 2054

Re: Blocking connections without blocking e-mail

Ha! I thought you meant put the offending IPs into a black list.... :) This one is caught by Cpanel cpHulk A device at the “124.234.183.221” IP address has made a large number of invalid login attempts against the account “www”. This brute force attempt has exceeded the maximum number of failed logi...
by JasGot
07 Jun 2020, 03:54
Forum: General Discussion (csf)
Topic: Blocking connections without blocking e-mail
Replies: 11
Views: 2054

Re: Blocking connections without blocking e-mail

There are thousands. That won't work.
by JasGot
03 Jun 2020, 21:50
Forum: General Discussion (csf)
Topic: Blocking connections without blocking e-mail
Replies: 11
Views: 2054

Blocking connections without blocking e-mail

Is it possible to block connections from China (CN) without blocking e-mail from China? We have one account that must receive e-mail from China. If I use CC_Deny, they e-mail is denied. I would like to block login attempts, but not block e-mail from CN. I'm not sure if whitelisting would work, but e...
by JasGot
21 Jan 2020, 13:42
Forum: General Discussion (csf)
Topic: Incoming mail being block by my configserver setup.
Replies: 0
Views: 1578

Incoming mail being block by my configserver setup.

I have an account that can't receive mail from a vendor that uses Outlook 365. I have been sent the NDR from the outgoing smtp server and the IT at the other end says I need to allow connection from the APAC region datacenter for O365. I am trying to figure out how to change my filtering and protect...
by JasGot
03 Sep 2013, 01:41
Forum: MailScanner
Topic: spam from odd TLDs - can we assign higher bayes score by TLD
Replies: 4
Views: 5660

Re: spam from odd TLDs - can we assign higher bayes score by

Did you use CSF to block those domains? That is a big load on the IPtables. We found success using the blacklist rules.

Change to your own TLDs that are bothering you.

Put this:

From: /\.pw$/ yes
From: /\.info$/ yes
From: /\.ru$/ yes

Those are tabs, not spaces


in the spam.blacklist.rules