Search results

That might be a good idea too indeed. But if somebody could give the correct line to block everything below 120 I should be fine for the moment and then I'm going to have a look at crowdsecurity this week. Seems interesting.

Please start a new thread about your question, that is off-topic here.

Well... the difference is that one has at least a good indication. If on ipv4 it's perfect, then most things should be fine as most company's here connect there ipv6 to their ipv4 (please correct me if I'm wrong). So then our Exim is using the same standards for both ipv4 and ipv6. If I'm not...

I woulnd't have a clue to be honest, also because I'm no database guru. And I also don't know if it's wise to use it that way in a live hosting environment if even possible. But feel free to test things on your own risk.

Well... unfortunately there are a few problems here. To be able to use Cloudflare proxy we would have to move the domain namesevers to Cloudflare which I don't like. The other things is that the ip's are not only Asian. But there might be another way. At this moment I'm blocking old Chrome...

Seem some sites on our servers are under attack in some way. Don't know exactly what they are doing but it's eating up bandwith of the users, while it looks as they are just requesting content. Recently I used a bad bot blocker in the httpd-includes.conf file and things got fairly quiet. Now...

I woulnd't now how to connect DA with it. I do know DA is looking at their own my.cnf and mysqlconf files. There might be a very slight possibility that DA might release a way which would make the option available to users to make use of the OS updates. For Alma 9 that would mean back to MariaDB...

For OS yes. For database until next year june max. Then it's EOL.

Not really if you look at the pricing plans. For 15/month the license is only for 15 user accounts. A converted DA account for 15/month is unlimited users. Maybe mini cloud as then you have 2 user more than with personal on DA. Full license is a bit cheaper if you don't convert.

I totally agree with you, but unfortunately is it what it is. I just mentioned it to be sure and also for others reading the topic and maybe are interested (company's). Maybe indeed a reseller hosting account or maybe Centos-webPanel. Personally I don't have any experience with Virtualmin and...

Not only modern OS, also no modern MariaDB/MySQL. MariaDB 10.11 is not supported anymore either for example. You don't need to abandon DA, you can convert your lifetime license (if it's an external license) to a modern license for 50% of the monthly price. Meaning it will cost you $ 14,50...

I don't think DA support can do very much is for some reason that port 25 is closed outgoing and open incoming. Still think it's a datacenter mistake. Since I've never used a remote server of my own to send mail over, I can't help you further myself. But I did found this thread...

Just to be sure, since this is working and the server host says port 25 is not blocked. You have csf -x but did you try with CSF active too? Could it be for some reason some default firewall kicked in, maybe firewalld (should be disabled) or a 3rd party service blocking things like Immunify360...

That is correct in case of a system working with ipv6 only. We work with ipv4 and 6. Ipv6 goes first if the receiving system also uses ipv6 and falls back to ipv4 if not. But indeed mailtester does not support ipv6 as far as I know. Are there already ipv6 only systems out there then?

They are a bit too harsh. You don't need 100%. Because they are checking things like DANE can only be achieved by customisation in DA if I'm correct. That's not pretty easy. And internet.nl substracts points for that. 78% is a nice score and this is because I don't have DANE and no RPKI. And for...

Yep, my mistake, only 1 ip indeed. But you have these already set to some values I guess. LF_FTPD = LF_FTPD_PERM = I'm also curious as to why CSF would not block these attacks on a proftpd server.

Do you know since when? Because it has been working several years ago (2020 anyway) when the log was pointing to /var/log/secure which is the case here.

I presume you have LF_DISTATTACK=1 and LF_DISTFTP and LF_DISTFTP_UNIQ to quite low numbers? And also the RESTRICT_SYSLOG = "3"?

Well. Better next time copy and paste it to notepad or wordpad before pasting here. Almost unreadable this way with al the html code.

You could set it up as LAN installation, then you only need 1 external ip address, for testing this is good, but you need a seperate license too. You can't use the same license which you also have on your VPS. You probably know, but just to be sure. I don't remember if DA can work on a dynamic...