Fli
11-16-2014, 07:00 PM
Hello,
how can i prevent be flooded by config server (CSF) emails that notiffy about blocked IPs trying to connect server SSH?
// update:
i think it can be done only by disabling following in /etc/csf/csf.conf
Send an email alert if an IP address is blocked by one of the
triggers
LF_EMAIL_ALERT = "0"
(setting to 0) and restarting csf and lfd ?
But it disable ALL login failure block emails for all services like FTP, SMTP, POP3, IMAP..
the "
triggers" is example this one:
#
Enable login failure detection of sshd connections#
# SECURITY NOTE: This option is affected by the RESTRICT_SYSLOG option. Read
# this file about RESTRICT_SYSLOG before enabling this option:
LF_SSHD = "5"
LF_SSHD_PERM = "1"
how can i prevent be flooded by config server (CSF) emails that notiffy about blocked IPs trying to connect server SSH?
// update:
i think it can be done only by disabling following in /etc/csf/csf.conf
Send an email alert if an IP address is blocked by one of the
triggers
LF_EMAIL_ALERT = "0"
(setting to 0) and restarting csf and lfd ?
But it disable ALL login failure block emails for all services like FTP, SMTP, POP3, IMAP..
the "
triggers" is example this one:
#
Enable login failure detection of sshd connections#
# SECURITY NOTE: This option is affected by the RESTRICT_SYSLOG option. Read
# this file about RESTRICT_SYSLOG before enabling this option:
LF_SSHD = "5"
LF_SSHD_PERM = "1"