how to set captcha code for Roundcube webmail

[AriyanPayamak]

Hello Every One
There are many attacks on my Direct Admin email service, how can I prevent these attacks?
In my opinion, if the email login page has a captcha code, this problem will be solved, I searched on Google, but I didn't find anything that could guide me to set these settings in the management console or ssh to do it through these settings.

I block more than 2000 IPs daily, it increases the load or over load of my server.

 

[Zhenyapan]

you sure they all coming from roundcube? maybe they directly connected to domains and their mail ports?
you can try to configure CSF to block some country codes for incoming ports if your visitors not from worldwide
or configure csf to block after less attempts, also switch to IPSET - it uses less CPU resources, that allows you to keep blocklist bigger.

 

[AriyanPayamak]

you sure they all coming from roundcube? maybe they directly connected to domains and their mail ports?
you can try to configure CSF to block some country codes for incoming ports if your visitors not from worldwide
or configure csf to block after less attempts, also switch to IPSET - it uses less CPU resources, that allows you to keep blocklist bigger.

Do you think blocking all IPs is a wise thing?
My server is in Canada and I am in Iran
Do you think I should block entries from other countries?
For example, America or China or Russia?
This creates a serious and new problem

 

[Zhenyapan]

that's why I wrote "you can try" I don't know all situation and just give you few variants.
you can wrote your own rules to filter wrong attempts more correct or use some external filter, like cloudflare captcha.

 

[AriyanPayamak]

I don't need email sending service on my host, the number of attacks has decreased since ,I disabled the email service.

 

[Zhenyapan]

I don't need email sending service on my host, the number of attacks has decreased since ,I disabled the email service.

previously you want to protect email, now you want to disable.
to isable - just stop exim/dovecot/popb4smtp services and remove their ports from CSF IN