ConfigServer Community Forum

Thanks For the reply Yes... that is what I have come to realise. (I'm very new to this) I tyring to work out how the precess works and how csf stops such attacks. When I am going through the logs to see what happened I have noticed that there are lots of connections like this (connections reach 100)...

I have a feeling that csf or my server configuration was overwhelmed by this attack.

I am going to put together the list of events that I see in the logs and hopefully someone will be able to shed some light on this so I can prevent this form happening again.

hi lfwej,

I have the default settings

LF_PERMBLOCK = 1
LF_PERMBLOCK_INTERVAL =86400
LF_PERMBLOCK_COUNT = 4
LF_PERMBLOCK_ALERT = 1

I have noticed a brute force attack on my server 2014-03-27 01:34:02 courier_login authenticator failed for URLremoved (DATASERV-PC) [98.230.172.199]:45213: 435 Unable to authenticate at present (set_id=admin): socket read timed out inside "and{...}" condition 2014-03-27 01:34:14 courier_l...