Page 1 of 1

Distributed Attacks

Posted: 30 Aug 2014, 09:55
by dvk01
re Distributed Attacks especially LF_DISTSMTP
I have a user who uses Hotmail to retrieve her emails from the server along with emails from her other pop accounts. She also uses the Hotmail interface to send emails via the pop account on my server.

Unfortunately this results in her being blocked ( or at least Hotmail is blocked)
I have had to completely disable LF_DISTSMTP which I don't want to do as another user did get his email account compromised a while ago & spam was sent via a bot attack

Is there any way to set this to ignore Hotmail IP numbers or Hotmail itself. The problem, is that Hotmail uses hundreds of IP numbers

Re: Distributed Attacks

Posted: 30 Aug 2014, 09:57
by ForumAdmin
You could try using /etc/csf/csf.rignore to ignore any IP's that have an rDNS of .hotmail.com

Restart csf and then lfd after making any changes.