Search results

They might have removed it from the docs. Look for brute_force_notice_ip.sh for example. Might be older but still working. Ah wait... I found the github link again which has a lot more options and more up to date. https://github.com/poralix/directadmin-bfm-csf/

Yes that's the fun of still using CSF. We have the CSF clustering option in place, if one gets blocked on 1 server, they get blocked on almost all servers (the ones we want added in the cluster). However I do understand wht you're saying. But using an attack with another ip can always be done...

There is also Fail2ban which also is not really developped anymore. Fail2ban and CSF/LFD where already there a long time ago and we installed that ourselves. CSF had won the "battle" because it was better than Fail2ban. At a certain point DA more or less integrated but it's not a requirement...

Stop without answering? Try replying again to your ticket and say you answered their question and you are still waiting for their answer and to unlock port 25.

Just to hook in on this. For these two it's exactly the same in cPanel en they also created an own fork for CSF with no vision at the moment and no real changes in the files. So even with paying a lot more for support and stuff, they are not doing better on this than DA.

You're correct, there was another thread where alternatives were shown and some new discussed, I pointed to the wrong one but anyway, this one is running further so never mind. :)

That depends what you're using. SMTP is nowadays mostly used via port 587 and 465, your mail client uses that to send mail to your server or an external mail service. But if you want your Directadmin server to send and receive your mail, then port 25 needs to be open incoming and outgoing...

I wonder about that too. This could just as well be spoken about in the other thread which he -did- see. https://forum.directadmin.com/threads/csf-future-on-directadmin-%E2%80%94-where-do-we-stand-6-months-after-the-shutdown.82025/ No need to start a new one about the same.

There are 2 things which you need for mail to work. 1.) When using Cloudlfare, the mail DNS records should not be proxied but set to DNS Only. This goes for mail, MX, smtp and so on. 2.) You require to have port 25 open incoming and outgoing, best is to doublecheck that for example to telnet to...

I do a lot of things and they all help. Something like you say I don't know the code for, but we don't get spam floods luckily. :) So it's almost never 10 messages within a few minutes. Also a reason why I protect users in other ways. Due to the countermeasuers like using good RBL's, blocking...

I don't use AI, don't really trust that yet. But I report every spam to Spamcop, and then it's also quite easy to see where it's coming from and how they are using it and often best way to block it.

As was the case with CSF/LFD in the beginning, so that should not be a big issue. :) But it's nice to hear you build something which works great for you. I probably won't test it on the production servers, but will have a look at it when Github is loading a bit faster then it's doing right now.

I already did that, but still mail came through. So I now raised the size Spamassassin was using. The secore is set to 10 at the moment. But it's not all Google spam. I also want to block hosters who are known to send spam and from which other ip's are used everytime. So the method to block...

That goes for every paid software and other panels.

Have you tried via SSH? da build clean da build update da build roundcube still same error? Might be due to the error notice, but since a cached version is used, one never knows.

Yes probably indeed. I have so many in there in the meantime, that I thought of clearing them out, and then stating where it's for, otherwise after some time ip's might change and one might be blocking things one does not want to block anymore. :)

Yes sorry, I was thinking about both names for folder and file at the same time and typed the wrong name, but in fact I used the correct name. I already did rebuild the exim.conf which automatically also restarts Exim so we should be fine then. I will correct my previous response to prevent...

Yes it probably was bigger as Spamcop already was complaining it was over 50k. I just checked, and it's either 1,5 or 6 MB. I put it in like this now in the variables.conf.custom file: EASY_SPAMASSASSIN_MAX_SIZE == 2048K I presume this is alright. Can we also just use M in there like 2M? And I...

Unfortunately still getting Google group spam mail in spite of the spamassassin setting.

Exactly... I forgot this one in my replyl. Exactly we did -our- math, which is ofcourse leading to critisism. What I ment is doing the math when your company would be in DA's position. With all those lifetime licenses out there. Seeing all company's stopping or already have stopped with lifetime...