Search found 10 matches

by lehels
14 Sep 2015, 10:47
Forum: General Discussion (csf)
Topic: Help with custom regex rules
Replies: 42
Views: 39313

Re: Help with custom regex rules

Indeed, worked great @Sergio - thanks much! - the following two worked out for me: /^\S+\s+\d+\S+ \[\d+\] H\=\(ylmf\-pc\) \[(\S+)\](:\S*:?) rejected EHLO or HELO ylmf\-pc\: HELO\/EHLO \- blacklisted HELO/ /^\S+\s+\d+\S+ \[\d+\] dovecot\_plain authenticator failed for \(.*\) \[(\S+)\](:\S*:?)? 535 In...
by lehels
09 Sep 2015, 14:13
Forum: General Discussion (csf)
Topic: Help with custom regex rules
Replies: 42
Views: 39313

Re: Help with custom regex rules

Let me know of you get a chance to take a look on it @Sergio, really appreciated. :) Thanks,
by lehels
07 Sep 2015, 08:09
Forum: General Discussion (csf)
Topic: Help with custom regex rules
Replies: 42
Views: 39313

Re: Help with custom regex rules

I have two cases here, both seem to trigger the regex [the command before return() gets executed] - but LFD doesn't seems to log or do anything:

https://gist.github.com/lehels/5743226f19e7eb733277
https://gist.github.com/lehels/eee1bb86ba96d2ff5ec9
by lehels
03 Sep 2015, 13:42
Forum: General Discussion (csf)
Topic: Help with custom regex rules
Replies: 42
Views: 39313

Re: Help with custom regex rules

Thanks @Sergio, ok I may have not posted the right rule here - however I've tried with several other rules, which I'm sure do work, and I was able to confirm by simply adding an echo to a file command in {} before the return function, and the file got created. So, if the regex is good - what would b...
by lehels
13 Aug 2015, 09:37
Forum: General Discussion (csf)
Topic: Help with custom regex rules
Replies: 42
Views: 39313

Re: Help with custom regex rules

Greetings! @Sergio, or anyone - can you please advise on the following rule I have: if (($globlogs{CUSTOM2_LOG}{$lgfile}) and ($line =~ /^\S+\s+\S+\s+(\S+) \S+ (\S+ )?\[(\S+)\](:)?(?:\S*)?(?:\s)?(?:\S*)?(?::)\d+ rejected EHLO or HELO ylmf-pc: HELO\/EHLO - blacklisted HELO/)) { return ("Failed S...
by lehels
24 Aug 2010, 07:30
Forum: MailScanner
Topic: MailScanner does not deliver some mails to all recipients,
Replies: 1
Views: 3107

MailScanner does not deliver some mails to all recipients,

Hello, We are experiencing a problem with MailScanner, it does not deliver some mails to all recipients which are listed in To or CC, or another strange situatiation is that, the mail is delivered only to the address at "CC:", not also to the mail "TO:". The cause would be that t...
by lehels
17 Oct 2007, 09:29
Forum: Suggestions (csf)
Topic: cpanel/webmail accesses blocked
Replies: 10
Views: 14578

You would need to remove the appropriate ports from TCP_IN and then add individual IP's to csf.allow to permit them access to those ports. I understand, but i'm talking about one domains webmail access, i don't want to block definetly the webmail port on a server, where are hundreds of domains, Any...
by lehels
09 Oct 2007, 12:28
Forum: Suggestions (csf)
Topic: cpanel/webmail accesses blocked
Replies: 10
Views: 14578

Infopro wrote:Block access to webmail? Isn't it already blocked by default? Or do you mean block all mail period?
I mean i have employees in an office, and i want to be accesible webmail just from that office, not elsewhere.
I thought if it would be possible to specify for a domain a few IPs to be accessible,
by lehels
08 Oct 2007, 16:48
Forum: Suggestions (csf)
Topic: cpanel/webmail accesses blocked
Replies: 10
Views: 14578

Related to this subject: What option do we have to fulfill a clients request, he wants to block all access to cPanel/Webmail for his domain, and let some IP-s to be able to connect, Thank you, xperience: if you are running the latest CSF [and why you wouldn't?] than you should see in the configurati...
by lehels
18 Jul 2007, 12:31
Forum: Suggestions (csf)
Topic: lfd: ignore with service
Replies: 3
Views: 6459

lfd: ignore with service

Ok, we have now: Lfd Ignore, "The following IP addresses will be ignored by all lfd checks." Would it be possible to ignore an IP, with a specific service, ex.: we have an IP, wich wants to connect more than 75times/hour to POP3, it is not an ultima solution to ignore the IP at all lfd che...