Distributed Attacks

Post Reply
dvk01
Junior Member
Posts: 80
Joined: 20 Feb 2010, 18:10

Distributed Attacks

Post by dvk01 »

re Distributed Attacks especially LF_DISTSMTP
I have a user who uses Hotmail to retrieve her emails from the server along with emails from her other pop accounts. She also uses the Hotmail interface to send emails via the pop account on my server.

Unfortunately this results in her being blocked ( or at least Hotmail is blocked)
I have had to completely disable LF_DISTSMTP which I don't want to do as another user did get his email account compromised a while ago & spam was sent via a bot attack

Is there any way to set this to ignore Hotmail IP numbers or Hotmail itself. The problem, is that Hotmail uses hundreds of IP numbers
ForumAdmin
Moderator
Posts: 1524
Joined: 01 Oct 2008, 09:24

Re: Distributed Attacks

Post by ForumAdmin »

You could try using /etc/csf/csf.rignore to ignore any IP's that have an rDNS of .hotmail.com

Restart csf and then lfd after making any changes.
Post Reply