Search found 3 matches
- 10 May 2016, 04:53
- Forum: General Discussion (csf)
- Topic: Block *successful* SMTP authentications
- Replies: 1
- Views: 1858
Block *successful* SMTP authentications
We occasionally see phished/hacked accounts sending spam via authenticated SMTP, and they typically come from a large number of different IPs. I know we can block based on failed SMTP failed but I'd like to block *successful* SMTP authentications when they come from too many different IPs (or better...
- 02 Jul 2015, 03:09
- Forum: General Discussion (csf)
- Topic: LFD high CPU retrieving global lists
- Replies: 3
- Views: 4936
Re: LFD high CPU retrieving global lists
Nothing unusual that I can see in /var/log/messages or dmesg
- 01 Jul 2015, 19:06
- Forum: General Discussion (csf)
- Topic: LFD high CPU retrieving global lists
- Replies: 3
- Views: 4936
LFD high CPU retrieving global lists
Once an hour the load on one of our servers spikes big time. Normal load is barely above zero, but it spikes to loads over 100.0 for a minute or two then comes back down to normal. When it spikes I always see these: processes, with the first one causing the load: lfd - retrieving global lists lfd - ...