ConfigServer Security & Firewall

wafaa

• November 21, 2013 09:00

Hello, I found that my IP address is blocked on: WHM> ConfigServer Security & Firewall for the reason : X.X.X.X # lfd: (eximsyntax) Exim syntax errors from X.X.X.X : 10 in the last 1800 secs - Thu Nov 21 09:00:38 2013 Thank you for helping me to understand the error.

• 

  cPanelMichael

  • November 21, 2013 14:03

  Hello :) Try searching /var/log/exim_mainlog for your IP address to see if there are specific error entries associated with it. Thank you.

  0
• 

  quizknows

  • November 21, 2013 21:06

  This happens when your IP sends malformed commands to exim. Check for viruses on your machine, and ensure you're using up to date mail clients. Also definitely check the logs as Michael suggested.

  0
• 

  sone

  • March 07, 2016 19:01

  I'm having the same problem all day long: lfd: (eximsyntax) Exim syntax errors from x.x.x.x : 15 in the last 3600 secs and I'm not finding the /var/log/exim_mainlog and there are many pc's in my lan, because of that I'm not able to scan all of them now trying to find viruses, or malwares. Are there another way to find the cause? more efficiently or precisely without contact the host.

  0
• 

  cPanelMichael

  • March 15, 2016 18:27

  Are there another way to find the cause? more efficiently or precisely without contact the host.

  
  Hello :) Here's another thread where this is discussed in more detail: sustained exim attack - syntax errors - mitigation measures Thank you.

  0

Please sign in to leave a comment.