Search found 1044 matches

by Sergio
17 Nov 2023, 03:50
Forum: General Discussion (csf)
Topic: csf CC_DENY country blocking delayed filling of IPSETs
Replies: 1
Views: 2623

Re: csf CC_DENY country blocking delayed filling of IPSETs

One easy way to block Countries is using cPhulk.
Enable it on your server, then go to the BLACK LIST by Country and you can block all the ones that you don't want.

Also, you can add range of IPs that you don't want them to access your server.
by Sergio
15 Nov 2023, 16:43
Forum: MailScanner Front-End
Topic: Please add the SUBJECT COUNT into MSFE statistics, please.
Replies: 1
Views: 3724

Please add the SUBJECT COUNT into MSFE statistics, please.

Sarah, Would you be kind to check the possibility to add a "SUBJECT COUNT" into MSFE Statistics, please? It will be great if it could send a warning mail when more that 100 emails (or threshold defined by admin) with the same subject are sent, this will help to track any email account that...
by Sergio
13 Nov 2023, 18:59
Forum: MailScanner Front-End
Topic: usage question
Replies: 5
Views: 3247

Re: usage question

To answer your quesions: first of all i want to know if this is server wide block Yes, it is. ...and also if there is window in GUi or command to check all blacklisted address Yes, the MailScanner Front End in WHM. One more thing that you can use is WHM, go to: FILTER INCOMING EMAILS BY DOMAIN and a...
by Sergio
03 Nov 2023, 00:45
Forum: General Discussion (csf)
Topic: I need help with a custom log
Replies: 1
Views: 1406

Re: I need help with a custom log

Your regex is not well constructed to work with the LOG line that you are posting. You have escape "[" and "]". You missed "i" at "/))", it should be "/i))". There is no "@" in the log line. The IP is better to have in just one "\d+&qu...
by Sergio
29 Oct 2023, 21:12
Forum: General Discussion (csf)
Topic: Opening port on specific server ip.
Replies: 1
Views: 1097

Re: Opening port on specific server ip.

Try to add "out" as well.
by Sergio
29 Oct 2023, 21:01
Forum: General Discussion (csf)
Topic: alert.txt emails not being sent/arriving
Replies: 4
Views: 3828

Re: alert.txt emails not arriving

. . . We have configured the alert template (/usr/local/csf/tpl/alert.txt) on multiple servers to send email to a particular email account This has been working fine for a number of years. All of a sudden on one server it no longer works. We are puzzled as to why this would be the case. . . . If yo...
by Sergio
15 Oct 2023, 19:20
Forum: MailScanner
Topic: Use Mailscanner to Filter Subject Text
Replies: 11
Views: 13127

Re: Use Mailscanner to Filter Subject Text

If you want, you can do rules like this, per example for bitcoin scams: body __SERGIO_BITCOIN01 /bitcoin address can\'t be tracked/i body __SERGIO_BITCOIN02 /central intelligence agency/i body __SERGIO_BITCOIN03 /do not get money from you/i body __SERGIO_BITCOIN04 /forum in the deep web|bought from ...
by Sergio
09 Oct 2023, 22:19
Forum: MailScanner
Topic: Use Mailscanner to Filter Subject Text
Replies: 11
Views: 13127

Re: Use Mailscanner to Filter Subject Text

Hi @andyhans, in your rule you use the or command "|" (the pipe sign means "or") and add two or more subjects in the rule, per example: header SUBJ_XAMPLE Subject =~ /subject one|subject two|subject three/i score SUBJ_XAMPLE 11 describe SUBJ_XAMPLE Subject XAMPLE Or you can use t...
by Sergio
25 Sep 2023, 23:25
Forum: General Discussion (csf)
Topic: Regex not working in custom log
Replies: 7
Views: 1623

Re: Regex not working in custom log

Yes, I wanted to know exactly what you want to do.

Here is the regex that will help you:

Code: Select all

/(\S+)\s\-\s\-\s\[\d+\/\S+\d+\s\-\d+\]\s\"\S+\"\s400\s\d+\s\"\-\"/i
Sergio
by Sergio
25 Sep 2023, 21:07
Forum: General Discussion (csf)
Topic: Regex not working in custom log
Replies: 7
Views: 1623

Re: Regex not working in custom log

ok,
on that log line what are you looking for to be triggered?
Also, on that log line what do you want to receive?