Configserver Firewall not blocking SMTP attacks?
I've configured CSF to respond to SMTP Auth, syntax errors, and other issues related to SMTP but it absolutely refuses to do so. It handles SSH and IMAP issues just fine, but for whatever reason not anything to do with Exim. I've double checked my configuration settings, and it's querying the proper Exim log file, but it's not blocking anything. My server's being hammered with smtpauth brute force attacks, and CSF is just sitting there. Is there something specific to CPanel's Exim configuration I need to do in order to give CSF the information it needs? I have my log selector set to +all, which I thought would do it, but I'm open to being corrected.
I know I should probably post this on the Exim support forums, and I did. However, my post is still pending approval so I'm posting it here since it may also be a CPanel-specific configuration issue.
-
That should work with the default settings.
What is your operting system & cPanel/WHM version?0 -
Alma Linux 8, WHM/CPanel 124.0.21.
0 -
I would actually recommend reaching out to ConfigServer directly instead of Exim:
0 -
Ah, that's what I meant but I was posting here before coffee. My message is still pending approval on the Configserver forums, so I'm posting it here.
0
Please sign in to leave a comment.
Comments
4 comments