ConfigServer Community Forum

In MailScanner v9.23 when you Release (resend) a message to someone it indicates that it modifies the email header To: field but in fact it inserts a duplicate To: header which makes the message RFC 5322 non-compliant. Google automatically bounces these messages so they never get to the recipient. How do I fix this?

Hello,

In the past I've used the RelayCountry plugin in Spamassassin to create rulesets in our custom.cf to score certain countries higher when email has passed through servers within that country. Here's an example of the config from the Apache Wiki:

header RELAYCOUNTRY_BAD X-Relay-Countries =~ /CN/
describe RELAYCOUNTRY_BAD Relayed through China at some point
scoreRELAYCOUNTRY_BAD 3.0...

Hi,
Sarah.

Is there a way to get a list of all users that have enabled MailControl ?

I have about 8 users that have activated MailControl but they didn't write any email address to get the reports and I will like to know whom they are in order to turn turn off MailControl on their accounts.

Thanks,
Sergio

Hi

Repeated maillog entries of the following form were not detected when they should have been (obfuscated):

Jun 6 13:28:17 vps dovecot: pop3-login: Disconnected: Connection closed: read(size=984) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user= , method=PLAIN, rip=1.2.3.4, lip=5.6.7.8, session=

Log entries like this are rare.

CentOS Linux release 7.9.2009
cPanel...

This double not seems like an error:
»
csf.ignore - a list of IP's and CIDR addresses that lfd should ignore and not
not block if detected
«
at

just wondering if there is an upgrade or a plan to upgrade for the new Modsec v3 system?

currently i get errors if the vendor addon is enabled...

Error: API failure: The system could not validate the new Apache configuration because httpd exited with a nonzero value. Apache produced the following error: AH00526: Syntax error on line 35 of /etc/apache2/conf.d/modsec/modsec2.cpanel.conf: Rules...

Hello,
i try to use csf firewall with docker
i read some tutorial, and i create a working solutions but i have a small problem...

m S.O. is almalinux 9

of course i try to enable
DOCKER = 1
in csf.conf but doesn't work.

so i use this setings and work
nano /etc/docker/daemon.json

{
iptables : false
}

nano /etc/csf/csfpost.sh

#!/bin/bash...

Hi,

when add blocklist on csf.blocklists ,
where will the ip stored ? ram or ?

will it slow down site and server performance when i add 1M ips ?

thanks

With MailScanner and MailScanner Front End installed, is the Report Junk setting in the end user's email interface of RoundCube integrated to MailScanner's learning? If not, could that feature be added to have MSFE become the handler for when this action is called from RoundCube?

At least Horde and Squirrel Mail have been deprecated, at least there is only one mail client to have to program for.

Hi, I've tried to uninstall with putty configserver explorer, but when wget i get the error HTTP request sent, awaiting response... 404 Not Found 2023-05-15 11:13:24 ERROR 404: Not Found.
How can I uninstall configserver explorer in whm?

I have enabled IPV6 in csf.conf - but a specific IPV6 address continually hitting my server - how to block it ?

I put it in the /etc/csf/csf.deny: but it is not stopping it

Please help;

I am trying to create a filter to rewrite the from and to of messages we send to our internal fax service.

My requirements are:
Determine if the message is from one of three allowed domains
If yes, then determine if the message is being sent to our fax software.
if yes, then
change the from address to the address our fax software will respond to
change the to address to the format our fax...

Hello,
Can anyone explain how to set LFD to send only one summary e-mail report per day?

Thanks,
P.S.: Sometimes we receive thousands of such Login failure alerts per day.

Time: Tue May 2 11:01:20 2023 -0300
IP: 34.126.78.62 (SG/Singapore/62.78.126.34.bc.googleusercontent.com)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked: Permanent Block

Log entries:
May 2 10:50:23 xbeta sshd : Invalid...

Hello,
I am using whm with csf, csx, and i have zerotier on the server (www.zerotier.com).

From time to time, zerotier goes offline and cannot connect to its network.
To fix this, i stop csf, restart zerotier, it turns on, i turn back on csf. It works for a while.

I have enabled the ports in csf config.

What shall i try next to do?

Thank you

i setup rules/archive.rules file to archive all mail on one of my inbox with:

To: * sa@mydomain.com

and works! but only non spam mail is copied ! how to force all mail: low-spam and high spam, to be copied ?

thanks

Hi

very new to configserver and trying to figure it al out.

Getting loads of these in my logs, how can i block them?? cannot seem to find anything?
Thank you

Apr 18 07:19:18 submission-login: Info: Client has quit the connection (auth failed, 1 attempts in 20 secs): user= , method=LOGIN, rip=46.148.40.92, lip=removed, session=

Hello ALL,

I use centreon to monitoring my servers.

centreon client use SSH to connect to my other servers every 5 min to check process running for exemple.
So I receive email every 5 min...

Account: customuser
Method: publickey authentication
Log line:
.. Accepted publickey for customuser from ... ssh2: ...

Is there any method disable emails for this specific user/ip source ?

Thank you for...

LFD sends emails without Message-ID which causes gmail to flag ethese emails as SPAM

Refer

And with ongoing emails being generated by ldf, the spam rate originating from domain/ip goes high and eventually makes a negative impact on the reputation of the ip and domain

This is definitely a critical bug and needs to be addressed
Kindly treat this as critical to be addressed on urgent priority

Simple - Add a quick deny form to the top of the page or in the header.

Thanks! Have a great day!

That.Is.All.

Hi,
I have configured below settings in csf.conf
LF_HTACCESS = 5
LF_HTACCESS_PERM = 1
HTACCESS_LOG = /usr/local/apache/logs/error_log
PORTS_htpasswd = 80,443

This settings blocks the IPs which makes brute force attempts to password protected directories through http requests, apache logs :

AH01618: user not found: /manage/
AH01618: user not found: /manage/
AH01618: user not found:...