how to block user ip if tried x attempts login failed in Roundcube

I didn't find any specific option about Roundcube in CSF.

Is there any possibility to block user ip if more than 3 failed login attempts in Roundcube? using CSF or some other mechanism?

Roundcube login looks very vulnerable.

Try to set the option:

Code: [Select]

$config['log_logins']in:
/usr/local/cwpsrv/var/services/roundcube/config/defaults.inc.php
to "true" then edit the file /etc/csf/csf.conf and change:

Code: [Select]

CUSTOM3_LOG = "/var/log/customlog"to

Code: [Select]

CUSTOM3_LOG = "/usr/local/cwpsrv/var/services/roundcube/logs/userlogins.log"Restart CSF and see if it blocks IP if the IP generates too many failed login attempts.


Additionally I recommend you to add your own IP to the whitelist before you perform any tests.