ConfigServer Security & Firewall

[wafaa]

Hello,

I found that my IP address is blocked on: WHM> ConfigServer Security & Firewall for the reason :
X.X.X.X # lfd: (eximsyntax) Exim syntax errors from X.X.X.X : 10 in the last 1800 secs - Thu Nov 21 09:00:38 2013

Thank you for helping me to understand the error.

 

[cPanelMichael]

Hello

Try searching /var/log/exim_mainlog for your IP address to see if there are specific error entries associated with it.

Thank you.

 

[quizknows]

This happens when your IP sends malformed commands to exim. Check for viruses on your machine, and ensure you're using up to date mail clients. Also definitely check the logs as Michael suggested.

 

[sone]

I'm having the same problem all day long:
lfd: (eximsyntax) Exim syntax errors from x.x.x.x : 15 in the last 3600 secs
and I'm not finding the /var/log/exim_mainlog and there are many pc's in my lan, because of that I'm not able to scan all of them now trying to find viruses, or malwares.
Are there another way to find the cause? more efficiently or precisely without contact the host.

 

[cPanelMichael]

Are there another way to find the cause? more efficiently or precisely without contact the host.

Hello

Here's another thread where this is discussed in more detail:

sustained exim attack - syntax errors - mitigation measures

Thank you.