ConfigServer Community Forum

Yes, try adding that specific IP on the ALLOWED IP list

Sergio

Righ now MailsCanner Front-End just have 4 buttons when checking an email, they are: BLACKLIST EMAIL, BLACKLIST DOMAIN, WHITELIST EMAIL and WHITELIST DOMAIN. Would you please consider 2 more: BLACKLIST *.DOMAIN AND WHITELIST *.DOMAIN ? Right now there a thousand of attacks from domains like: root@bn...

Another way to fix this could be to edit the entry at:

/var/lib/csf/zone/us.zone
from this 104.171.32.0/ to 104.171.32.0/20

Yes, in her computer go to:
settings -> system -> about
if it has not been changed by her, it should appear something like per example: DESKTOP-03TITAJ
and that name is what you could search for in all /usr/local/cpanel/logs/ files, hope that will give you a hint on where is the issue.

see above post

HAPPY NEW YEAR EVERYBODY!!! I want to share an SPAM ASSASSIN Rule that I am sure you will like it, I know here is not the place to add SPAMASSASSIN rules as this forum was for CSF REGEX rules, but I am sure you will like it. Details: A lot of spam have entered into my servers coming from OUTLOOK IP ...

Hi.
One way to find what is bloking that computer is to check log files searching for computer name not by the IP, give it a try.

Sergio

You can add rules for CSF on the file: /usr/local/csf/bin/regex.custom.pm and after you add your rules you have to restart LFD in order for them to start working. Be very carful adding rules in there as a bad written rule can make your server down. Please read CSF readme file to know about this. Ser...

Yes, you can create your own CSF rule to block modsecurity attacks. Please read my post at: https://forum.configserver.com/viewtopic.php?p=32708#p32708 In that post I wrote a rule that you can use to block ModSec attacks, you will need to write the rules that you want to block and CSF will block the...

Francisco, CMC does not block any IP, the one that should block the IP is CSF, check the following options: [*]Enable failure detection of repeated Apache mod_security rule triggers LF_MODSEC = Default: 5 [0-100] LF_MODSEC_PERM = Default: 1 [0-604800] Also, in WHM you should check that the ModSecuri...