The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

YLMF the final BLOCK/DROP

Discussion in 'E-mail Discussions' started by gavcom, Mar 11, 2015.

  1. gavcom

    gavcom Member

    Joined:
    Mar 4, 2015
    Messages:
    10
    Likes Received:
    2
    Trophy Points:
    3
    cPanel Access Level:
    Root Administrator
    Okay so you see the classic logs of YLMF and its flooding your logs and server and and and, well after some months of searching, reading, downloading, attempting and crashing of exim <-- LOL I THINK i have finally found a solution for the dreaded YLMF head banging, grey hair highlights, energy drinking, smoked up room, jumping off of roof problem. Did i over do that part oh well.
    Point is i've tried every block on the exim frontier and it works but that's not how i wanted the block to happen so i turned to a more direct approach.

    KEEP IN MIND YOU DO THIS, OF COURSE AT YOUR OWN RISK. I HAVE IT AND IT SEEMS TO BE WORKING... SO FAR...

    You need CSF, but if you good with iptables you can probably insert this directly into the firewall.
    you must have root access, im not sure about shared servers, your problem i guess

    Before CSF Rules:
    if the file doesn't exist, pico it or nano or what ever your flavour and save...
    csfpre.sh: Create file /etc/csf/csfpre.sh

    add following command and save:
    iptables -A INPUT -p tcp --dport 25 -m string --string 'ylmf-pc' --algo bm -j DROP

    --dport 25 <-- standard smtp port you can change this to what ever your smtp port is

    multiport blocks:
    --dport 25,26,465,587

    close/save and run:
    csf -r


    Okay so that is it, its been working for me and i hope it works for you...

    sources :
    http://tecadmin.net/add-custom-iptables-rules-with-csf/
    https://gist.github.com/macmladen/f9c9013d944e3a70ff6f
    http://www.crackjet.com/drop-smtp-connection-at-heloehlo-matching-machine-name/
     
    Curious Too likes this.
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,762
    Likes Received:
    662
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    I am happy to see you were able to find a solution that works well for you. Thank you for taking the time to post a thread that you think others may find helpful.
     
Loading...
Similar Threads - YLMF final BLOCK
  1. iso99
    Replies:
    1
    Views:
    667

Share This Page