ConfigServer Community Forum

Hi there,

I really love the relay alert notifications, and it has been invaluable for catching spammers in the past, but how about adding the ability to prevent notifications/alerts from a particular user account? Note that I don't want to ignore all events from that user, just the relay alerts.

As an example, some users have legitimate needs to send large amounts of e-mail, and we're flooded with notification e-mails from them every time they reach the trigger threshold. Sure, we can filter these out, but it makes more sense to prevent them being sent

Keep up the great work.

what if the user has a virus/email worm/malware at a given moment? like a dm.cgi script or so?

wouldn't you want to see what it sends?

you can setup some email filters if it annoys you so much.
that's what i did with some email reports - just forward them to some other let's say yahoo address which i check from time to time.

but i keep the relay alerts delivered to my main address.

minadreapta wrote:what if the user has a virus/email worm/malware at a given moment? like a dm.cgi script or so?

wouldn't you want to see what it sends?

Not really. The point of providing the exceptions is that only a very select few people would be added to the exception list to begin with. If anything it's a feature requested more for LOCALRELAY than standard SMTP relay.

you can setup some email filters if it annoys you so much.
that's what i did with some email reports - just forward them to some other let's say yahoo address which i check from time to time.

but i keep the relay alerts delivered to my main address.

You missed the point. It's far better to prevent the mails from being sent than it is to filter them out, since you're reducing traffic and server load in the process.

I'll add it to the wishlist for further consideration.

FWIW, I'd LOVE to see this capability as well...

This feature was added to v4.75 (csf.mignore)

hmm... I'm still seeing the alerts after adding the username in. I'm not sure which of these is causing the alert though:

RT_RELAY_ALERT = Default: 1
RT_RELAY_LIMIT = Default: 100
RT_RELAY_BLOCK = Default: 0

# This option triggers for email authenticated by SMTP AUTH
RT_AUTHRELAY_ALERT = Default: 1
RT_AUTHRELAY_LIMIT = Default: 100
RT_AUTHRELAY_BLOCK = Default: 0

# This option triggers for email authenticated by POP before SMTP
RT_POPRELAY_ALERT = Default: 1
RT_POPRELAY_LIMIT = Default: 100
RT_POPRELAY_BLOCK = Default: 0

# This option triggers for email sent via /usr/sbin/sendmail or /usr/sbin/exim
RT_LOCALRELAY_ALERT = Default: 1
RT_LOCALRELAY_LIMIT = Default: 100

# This option triggers for email sent via a local IP addresses
RT_LOCALHOSTRELAY_ALERT = Default: 1
RT_LOCALHOSTRELAY_LIMIT = Default: 100


The email I receive just says "Relay Alert for..." - it doesn't say if it is RT_RELAY_ALERT, RT_LOCALRELAY_ALERT, RT_LOCALHOSTRELAY_ALERT, etc.

Which of these does the new setting allow us to control?

You would have to post the whole alert email.