Search found 10 matches
- 14 Sep 2015, 10:47
- Forum: General Discussion (csf)
- Topic: Help with custom regex rules
- Replies: 42
- Views: 39313
Re: Help with custom regex rules
Indeed, worked great @Sergio - thanks much! - the following two worked out for me: /^\S+\s+\d+\S+ \[\d+\] H\=\(ylmf\-pc\) \[(\S+)\](:\S*:?) rejected EHLO or HELO ylmf\-pc\: HELO\/EHLO \- blacklisted HELO/ /^\S+\s+\d+\S+ \[\d+\] dovecot\_plain authenticator failed for \(.*\) \[(\S+)\](:\S*:?)? 535 In...
- 09 Sep 2015, 14:13
- Forum: General Discussion (csf)
- Topic: Help with custom regex rules
- Replies: 42
- Views: 39313
Re: Help with custom regex rules
Let me know of you get a chance to take a look on it @Sergio, really appreciated. Thanks,
- 07 Sep 2015, 08:09
- Forum: General Discussion (csf)
- Topic: Help with custom regex rules
- Replies: 42
- Views: 39313
Re: Help with custom regex rules
I have two cases here, both seem to trigger the regex [the command before return() gets executed] - but LFD doesn't seems to log or do anything:
https://gist.github.com/lehels/5743226f19e7eb733277
https://gist.github.com/lehels/eee1bb86ba96d2ff5ec9
https://gist.github.com/lehels/5743226f19e7eb733277
https://gist.github.com/lehels/eee1bb86ba96d2ff5ec9
- 03 Sep 2015, 13:42
- Forum: General Discussion (csf)
- Topic: Help with custom regex rules
- Replies: 42
- Views: 39313
Re: Help with custom regex rules
Thanks @Sergio, ok I may have not posted the right rule here - however I've tried with several other rules, which I'm sure do work, and I was able to confirm by simply adding an echo to a file command in {} before the return function, and the file got created. So, if the regex is good - what would b...
- 13 Aug 2015, 09:37
- Forum: General Discussion (csf)
- Topic: Help with custom regex rules
- Replies: 42
- Views: 39313
Re: Help with custom regex rules
Greetings! @Sergio, or anyone - can you please advise on the following rule I have: if (($globlogs{CUSTOM2_LOG}{$lgfile}) and ($line =~ /^\S+\s+\S+\s+(\S+) \S+ (\S+ )?\[(\S+)\](:)?(?:\S*)?(?:\s)?(?:\S*)?(?::)\d+ rejected EHLO or HELO ylmf-pc: HELO\/EHLO - blacklisted HELO/)) { return ("Failed S...
- 24 Aug 2010, 07:30
- Forum: MailScanner
- Topic: MailScanner does not deliver some mails to all recipients,
- Replies: 1
- Views: 3107
MailScanner does not deliver some mails to all recipients,
Hello, We are experiencing a problem with MailScanner, it does not deliver some mails to all recipients which are listed in To or CC, or another strange situatiation is that, the mail is delivered only to the address at "CC:", not also to the mail "TO:". The cause would be that t...
- 17 Oct 2007, 09:29
- Forum: Suggestions (csf)
- Topic: cpanel/webmail accesses blocked
- Replies: 10
- Views: 14578
You would need to remove the appropriate ports from TCP_IN and then add individual IP's to csf.allow to permit them access to those ports. I understand, but i'm talking about one domains webmail access, i don't want to block definetly the webmail port on a server, where are hundreds of domains, Any...
- 09 Oct 2007, 12:28
- Forum: Suggestions (csf)
- Topic: cpanel/webmail accesses blocked
- Replies: 10
- Views: 14578
I mean i have employees in an office, and i want to be accesible webmail just from that office, not elsewhere.Infopro wrote:Block access to webmail? Isn't it already blocked by default? Or do you mean block all mail period?
I thought if it would be possible to specify for a domain a few IPs to be accessible,
- 08 Oct 2007, 16:48
- Forum: Suggestions (csf)
- Topic: cpanel/webmail accesses blocked
- Replies: 10
- Views: 14578
Related to this subject: What option do we have to fulfill a clients request, he wants to block all access to cPanel/Webmail for his domain, and let some IP-s to be able to connect, Thank you, xperience: if you are running the latest CSF [and why you wouldn't?] than you should see in the configurati...
- 18 Jul 2007, 12:31
- Forum: Suggestions (csf)
- Topic: lfd: ignore with service
- Replies: 3
- Views: 6459
lfd: ignore with service
Ok, we have now: Lfd Ignore, "The following IP addresses will be ignored by all lfd checks." Would it be possible to ignore an IP, with a specific service, ex.: we have an IP, wich wants to connect more than 75times/hour to POP3, it is not an ultima solution to ignore the IP at all lfd che...