Please help me to confirm my modify is right

[darkbear]

Because too many IPS try to hack in my smtp service, I got lot of "LF_SMTPAUTH" report everyday, so I want to block all non-user login, just let server and user with vpn to use(that vpn server ip is fixed)

so I just change csf's "SMTPAUTH_RESTRICT" to "ON"

add my server ips and VPN ip (They using vpn to access email) to /etc/exim.smtpauth included 127.0.0.1( Is it necessary to add 127.0.0.1? )

then I add this line in to my directadmin /etc/exim.variables.conf.custom
auth_advertise_hosts = ${if match_ip{$sender_host_address}{iplsearch;/etc/exim.smtpauth}{*}{}}

then SSH
cd /usr/local/directadmin/custombuild
./build exim_conf

so is that right or something I need to do too? thank you so much

 

[Simonlo]

Yes, I'm doing the same thing