The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

csf Firewall temporary IP entries issue

Discussion in 'Security' started by crazyaboutlinux, Nov 29, 2010.

  1. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    938
    Likes Received:
    0
    Trophy Points:
    16
    Hi,

    One our client is facing the problem that his mail id is frequently went in temporary deny list as well as their local ISP, after that csf permanently deny.

    Code:
    IP address	A/D	Port	Dir	Time To Live	Comment
    Unblock 202.131.xxx.xx? 	DENY	202.131.xxx.xx	*	in	13m 30s	lfd - *Port Scan* detected from 202.131.xxx.xx (IN/India/-). 11 hits in the last 20 seconds
    Unblock 202.131.xxx.xx? 	DENY	202.131.xxx.xx	*	in	16m 31s	lfd - *Port Scan* detected from 202.131.xxx.xx (IN/India/-). 11 hits in the last 201 seconds
    Unblock 202.131.xxx.xx? 	DENY	202.131.xxx.xx	*	in	21m 38s	lfd - *Port Scan* detected from 202.131.xxx.xx (IN/India/-). 11 hits in the last 206 seconds
    Unblock 202.131.xxx.xx? 	DENY	202.131.xxx.xx	110,995	in	12m 50s	lfd - pop3d - 61 logins in 1258 secs from 202.131.xxx.xx (IN/India/-) for [email]service@example.com[/email] exceeds 60/hour
    Unblock 202.131.xxx.xx? 	DENY	202.131.xxx.xx	110,995	in	12m 50s	lfd - pop3d - 61 logins in 1977 secs from 202.131.xxx.xx (IN/India/-) for [email]care@example.com[/email] exceeds 60/hour
    Unblock 202.131.xxx.xx? 	DENY	202.131.xxx.xx	110,995	in	12m 50s	lfd - pop3d - 61 logins in 2791 secs from 202.131.xxx.xx (IN/India/-) for [email]sales@example.com[/email] exceeds 60/hour
    
    We are using
    cPanel/WHM : WHM 11.26.20
    CENTOS 4.8 i686


    Please guys help to fix this problem once for all
     
    #1 crazyaboutlinux, Nov 29, 2010
    Last edited: Nov 29, 2010
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,478
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    This is a question for the CSF forums. Meantime, find this setting in your firewall and change it to what suits your customers needs.



    lfd - pop3d - 61 logins in 1258 secs from 202.131
     
  3. crazyaboutlinux

    crazyaboutlinux Well-Known Member

    Joined:
    Nov 3, 2007
    Messages:
    938
    Likes Received:
    0
    Trophy Points:
    16
    Hey Thanks BRO,

    i was seeking for this option & got it here,Thank you so much

    The same thread i posted on ConfigServer Scripts Forum
     
  4. GoWilkes

    GoWilkes Well-Known Member

    Joined:
    Sep 26, 2006
    Messages:
    367
    Likes Received:
    1
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Just a thought, this forum might be a logical place for a CSF discussion. It integrates well into cPanel, and this is generally the first place that I look for help with it.

    Just a thought...
     
Loading...

Share This Page