Skip to main content
cPanel Technical Support has been heavily impacted by hurricane Beryl and our ability to respond to tickets has been hindered as a result. We appreciate your understanding and patience as we address these delays.

New SMTP DoS ?

Comments

4 comments

  • quizknows
    You can block the worst IPs with CSF but at this point there's no stopping it completely. I put some custom regex's for LFD in this thread.
    0
  • katmai
    [quote="quizknows, post: 1471811">You can block the worst IPs with CSF but at this point there's no stopping it completely. I put some custom regex's for LFD in this thread.
    0
  • cPanelMichael
    Hello :) You may want to consult with your datacenter/NOC to see you can implement a firewall/DDoS device that can mitigate the DDoS or filter that specific traffic. Thank you.
    0
  • quizknows
    No legitimate mail server would be sending this kind of traffic. The IPs will be correct, SMTP is a TCP connection, you can only spoof source of UDP packets such as DNS. Are you using only numeric IP addresses and not reverse DNS records? Like michael said, you may want to contact your data center to see if they can help. Otherwise, best I know of is the custom LDF regex to block the worst offending IP addresses.
    0

Please sign in to leave a comment.