Page 1 of 1

AUTHRELAY Limit and Block

Posted: 16 May 2014, 14:27
by akela
Hello Guys,

I would like to know if it's possible: we want to receive alerts if someone reached RT_AUTHRELAY_LIMIT limit (for example, 100) and blocks an IP (and alert) if someone reached second RT_AUTHRELAY_LIMIT limit (for example, 200).

If this possible to do?

Thanks.

Re: AUTHRELAY Limit and Block

Posted: 16 May 2014, 22:05
by Sergio
Yes, it is possible.

In csf configure the following:
RT_AUTHRELAY_ALERT = 1
RT_AUTHRELAY_LIMIT = 100 (number of first limit)
RT_AUTHRELAY_BLOCK = 3600 (block IP for 1 hour)

Then, in CMM set MANAGE MAIL HOURLY LIMITS and set it to 200.

On doing this, CSF will send you an email saying that 100 emails were sent and when the account reaches 200 the IP will be blocked for 3,600 secs.

Re: AUTHRELAY Limit and Block

Posted: 20 May 2014, 13:14
by akela
Thanks, Sergio.

But AUTHRELAY and MAIL HOURLY LIMITS aren't the same. Moreover, "Max hourly emails per domain" can be set in WHM.

Re: AUTHRELAY Limit and Block

Posted: 20 May 2014, 15:25
by Sergio
Actually, they are related.

Let me explain, you set the AUTHRELAY alert at 100 and you are going to receive that alert or any account that has reached that limit. If the account has been modified on the MAIL HOURLY LIMIT to 200, the account will be not blocked and you will receive the email. If the MAIL HOURLY LIMIT has not been modified and is 100 the account will blocked.

And, yes, there is a general option for "Max hourly emails per domain" and is server wide. But if you have CMM "ConfigServer Mail Manage" you can modify each domain's limit.

This is the only work around that I can suggest as CSF doesn't has what you want.

You can try and ask for this on the "Suggestions CSF" forum.

Re: AUTHRELAY Limit and Block

Posted: 21 May 2014, 18:12
by akela
Thank you for the answer.

I would explain my point of view regarding AUTHRELAY and MAIL HOURLY LIMIT :)

Let's imagine client sends an email with 100 recipients (99 of Carbon Copies). So, it would be only 1 AUTHRELAY and 100 emails from a server. Does it make sense?

I will take your advice and will post in "Suggestions CSF" forum. Thanks!