Where does csf keep the list of blocked emails that are associated with IP address

Post Reply
ZaCherry
Junior Member
Posts: 3
Joined: 31 Mar 2024, 12:08

Where does csf keep the list of blocked emails that are associated with IP address

Post by ZaCherry »

Hi all,
Where does csf keep the list of blocked emails that are associated with IP address?
I remember on one of my previous csf installations I had the ability to see blocked emails and from which IP addresses these emails tried to connect but now I can't find it on this new server.
ZaCherry
Junior Member
Posts: 3
Joined: 31 Mar 2024, 12:08

Re: Where does csf keep the list of blocked emails that are associated with IP address

Post by ZaCherry »

The logs I am checking - none of these show the exact email addresses that causes csf blocks but only general IP address and time of block:

The log files that CSF and LFD use are the following:

/var/log/lfd.log:
The log contains any failed login attempts, as well as IP addresses that have been blocked by CSF.

/etc/csf/csf.deny:
Contains lists of IP addresses that have been blocked. For each entry, it shows the date the IP address was blocked and the reason.

/etc/csf/csf.allow:
Contains lists of IP addresses that have been whitelisted.

So there is another locaton with an log file that keeps the emails that caused blocks from a certain IP address?
Last edited by ZaCherry on 24 Apr 2024, 16:58, edited 1 time in total.
Sergio
Junior Member
Posts: 1712
Joined: 12 Dec 2006, 14:56

Re: Where does csf keep the list of blocked emails that are associated with IP address

Post by Sergio »

You can check:
/var/log/exim_rejectlog

Sergio
smedby2
Junior Member
Posts: 6
Joined: 29 May 2024, 15:37

Re: Where does csf keep the list of blocked emails that are associated with IP address

Post by smedby2 »

There is no file like that.

tail -F /var/log/exim_rejectlog
cannot open '/var/log/exim_rejectlog' for reading: No such file
Sergio
Junior Member
Posts: 1712
Joined: 12 Dec 2006, 14:56

Re: Where does csf keep the list of blocked emails that are associated with IP address

Post by Sergio »

Try checking /var/log/maillog
Post Reply