Messages

1

Postfix / Re: Centos7 - Postfix 3.4.7 version 3.8.1 upgrade?

« on: October 21, 2023, 08:18:55 PM »

Help me

2

E-Mail / Re: Roundcube update not working due to php version of cwpsrv

« on: July 01, 2023, 05:55:22 PM »

Run it in var/www/html/. Then it will support php version

3

Postfix / Re: SASL LOGIN authentication failed: UGFzc3dvcmQ6 hk.

« on: July 01, 2023, 06:52:40 AM »

Thank you very much for the help. This country blocking is beautiful. But there is a problem. When I block US, mails sent from gmail do not come. What do you do for such situations?

4

Postfix / Re: SASL LOGIN authentication failed: UGFzc3dvcmQ6 hk.

« on: June 30, 2023, 09:00:45 AM »

Take a look at country code blocking. I block the 5 biggest spam sending sources -- none of my clients do business with these countries: RU, CN, KP, NG, {Bulgaria, Poland, Brazil have also been big culprits on my servers, but it tends to come in waves}. There is a case to allow for China due to Alibaba allowing direct vendor contact with potential customers -- if that's something your clients engage in.

The IP in your example resolves to GB, so that may be from a botnet or it may be a legit hacking attempt from GB, which I have seen on my servers. I just can't block a huge swath of Europe, due to my clients communicating with people there and potential site visitors from there.

Could you share your multi-country blocking code? I guess it will be added in main.cf or master.cf?

5

Postfix / Centos7 - Postfix 3.4.7 version 3.8.1 upgrade?

« on: June 29, 2023, 06:48:35 PM »

I am running the following code over ssh. postconf mail_version


the result shows mail_version = 3.4.7 as i understand this is the postfix version..


I want to upgrade to Postfix 3.8.1. The postfix-3.8.1.tar.gz file exists. How can I upgrade this version now?

Can you please explain in detail

6

Postfix / Re: SASL LOGIN authentication failed: UGFzc3dvcmQ6 hk.

« on: June 29, 2023, 06:43:03 PM »

http://forum.centos-webpanel.com/index.php?topic=3329.msg11702#msg11702
 I applied the following codes and it started working..

I applied the following codes and it started working.

But what I want to ask now is that it temporarily blocks it. How can we do it to be automatically added into Blacklist configuration

7

Postfix / Re: SASL LOGIN authentication failed: UGFzc3dvcmQ6

« on: June 29, 2023, 01:18:01 PM »

Can you tell me how you applied it?

Thank you very much @rcschaff,

Your suggestion very helpfull.
I am in this bad situation for months, lastly I found your best suggestion.
Thanks again.

Welcome to owning a server.   Use CSF firewall to block the two ip's.  Setup automatic blocks on 4-5 failed logins.

8

Postfix / SASL LOGIN authentication failed: UGFzc3dvcmQ6 hk.

« on: June 29, 2023, 09:06:07 AM »

Code: [Select]

Jun 29 11:55:41 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:55:48 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:55:49 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:56:00 mailserver postfix/smtpd[10595]: connect from unknown[80.94.95.184]
Jun 29 11:56:07 mailserver postfix/smtpd[10595]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:56:08 mailserver postfix/smtpd[10595]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:56:19 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:56:26 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:56:26 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:56:38 mailserver postfix/smtpd[10595]: connect from unknown[80.94.95.184]
Jun 29 11:56:45 mailserver postfix/smtpd[10595]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:56:45 mailserver postfix/smtpd[10595]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:56:57 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:57:04 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:57:04 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:57:17 mailserver postfix/smtpd[10595]: connect from unknown[80.94.95.184]
Jun 29 11:57:23 mailserver postfix/smtpd[10595]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:57:23 mailserver postfix/smtpd[10595]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:57:36 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:57:42 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:57:43 mailserver postfix/smtpd[10595]: connect from unknown[141.98.10.26]
Jun 29 11:57:43 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:57:46 mailserver postfix/anvil[1724]: statistics: max connection rate 40/3600s for (smtp:80.94.95.184) at Jun 29 11:57:36
Jun 29 11:57:46 mailserver postfix/anvil[1724]: statistics: max connection count 1 for (smtp:80.94.95.184) at Jun 29 11:47:59
Jun 29 11:57:48 mailserver postfix/smtpd[10595]: warning: unknown[141.98.10.26]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:57:48 mailserver postfix/smtpd[10595]: disconnect from unknown[141.98.10.26] ehlo=1 auth=0/1 quit=1 commands=2/3
Jun 29 11:57:55 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:57:59 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:58:00 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:58:14 mailserver postfix/smtpd[10595]: connect from unknown[80.94.95.184]
Jun 29 11:58:20 mailserver postfix/smtpd[10595]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:58:20 mailserver postfix/smtpd[10595]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:58:33 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:58:37 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:58:37 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:58:52 mailserver postfix/smtpd[10595]: connect from unknown[80.94.95.184]
Jun 29 11:58:58 mailserver postfix/smtpd[10595]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:58:58 mailserver postfix/smtpd[10595]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Jun 29 11:59:11 mailserver postfix/smtpd[9106]: connect from unknown[80.94.95.184]
Jun 29 11:59:18 mailserver postfix/smtpd[9106]: warning: unknown[80.94.95.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 29 11:59:19 mailserver postfix/smtpd[9106]: disconnect from unknown[80.94.95.184] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4

CWP panel screenshot firewall https://i.ibb.co/gj8L2Fq/mails.png

Hello,

I've looked at the same threads on the forum. But my problem is this. If you pay attention to the logs, the same IP is always trying to establish a connection. Firewall active, banned in csf.conf in 2 attempts. But it doesn't ban, where am I going wrong

9

E-Mail / Roundcube forgot password plugin

« on: October 22, 2022, 02:24:18 PM »

I know not all of you have time. But please someone help. For example, can anyone explain how to install and run the forgot password plugin with a visual?

https://github.com/saas-dev/roundcube-forgot_password