Problem with csf / lfd blocking someone due to pop3 for no reason

Status
Not open for further replies.

ABouchard55

Registered
May 10, 2012
3
0
51
cPanel Access Level
Root Administrator
Hi
I have a problem on my cPanel server where a client is constantly blocked by lfd, with this error in the logs (informations are hidden on purpose):

May 10 15:17:03 mail lfd[20531]: pop3d - 61 logins in 986 secs from **.**.191.142 (CA/Canada/bas1-legardeur06-1176354702.dsl.bell.ca) for m***[email protected]***l.com exceeds 60/hour - *Blocked in csf* for 2614 secs [LT_POP3D]
May 10 15:17:03 mail lfd[20531]: tracking email sent for m***[email protected]***l.com

The problem is, his internet provider provides a dynamic IP, so even if I whitelist him, he will be blocked again. Also, we checked all of the computer on his IP address (many computers at work), there is not a computer that has his address configured that could cause an error. Only his own computer his configured for his email address, and it works, then blocks all of a sudden.

We're trying to figure out what the problem could be for a week now. Can anybody help in some way ?

Thanks, Antoine Bouchard
 

PenguinInternet

Well-Known Member
PartnerNOC
Jun 20, 2007
194
26
78
Cardiff, UK
cPanel Access Level
DataCenter Provider
Twitter
This is not a cPanel issue - it's just down to the default configuration for CSF & LFD and is easily adjusted. If LFD sees more than 60 POP3 logins per hour from the same IP then it will block it - you can easily adjust this by aftering the LT_POP3D directive in the configuration
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
43
348
somewhere over the rainbow
cPanel Access Level
Root Administrator
Going forward, please post CSF and LFD questions to their own free support forum:

CSF Forum

I'm closing this thread as we are encouraging users to go to the CSF forum for these non-cPanel questions.
 
Status
Not open for further replies.