ConfigServer Community Forum

Correct, I was referring to DNS resolvers.

We have experienced an issue before with slow SMTP but that turned out to be the slow resolvers.

Perhaps you might want to take a peek at them jut to rule it out?

If you are looking for temporary bans, then yes, the configuration begins below "LF_DAEMON".

Chirpy, The following three lines show up in the "secure" log when an RSA login fails: Sep 27 12:42:49 hostname sshd[4446]: Invalid user test from ::ffff:123.123.123.123 Sep 27 12:42:49 hostname sshd[4448]: input_userauth_request: invalid user test Sep 27 12:42:49 hostname sshd[4448]: Rece...

Chirpy, I'm not sure this has been discussed but here goes: I've noticed that since we don't use SSH password auth we don't get Bruteforce IPs blocked for SSH. I suppose it makes sense if an RSA auth failure isn't classified as a loggin failure (I'm thinking out loud there as I'm not sure on the tec...

Chirpy, I know the feature exists to have a centralized IP deny/allow list but what about having a clustered one? For example, we host our servers on the same network. So what would be nice is if one server denies/allows an IP, the other servers pick up the IP and perform the same action. It might s...

Hey bud,

I'd be happy to provide access to a fresh new LAMP install of ubuntu-2.6.15-27-server.

Just provide me a public RSA Key for SSH via PM and I'll reply with the host.

Has anyone tested CSF on Debian?