Search found 3 matches

by vhortex
25 Apr 2017, 07:31
Forum: General Discussion (csf)
Topic: Custom REGEX rules for CSF.
Replies: 92
Views: 1936571

Re: Custom REGEX rules for CSF.

Hi, Can we adjust the rules/regex to scan for a longer time. I am not sure if there is any way to do it via customs.regex Scenario is Attacker will randomly attack once or twice an hour to avoid being blacklisted. If there is anyway that this can be achieve, please give an idea. I don't want to tamp...
by vhortex
25 Apr 2017, 07:27
Forum: General Discussion (csf)
Topic: How to test custom regex
Replies: 2
Views: 2412

Re: How to test custom regex

After further checking, it takes approximately 1 hour before CSF adjusted and pick failures. Note I have 1800 items in the deny list.
by vhortex
24 Apr 2017, 11:50
Forum: General Discussion (csf)
Topic: How to test custom regex
Replies: 2
Views: 2412

How to test custom regex

Hi, EDIT: OS is CentOS 7 / CSF Version 10.06 How can I test if custom regex is firing or working? CUSTOM1_LOG is set as /var/log/maillog I have this in regex.custom.pm if (($globlogs{CUSTOM1_LOG} {$lgfile}) and ($line =~ /^\S+\s+\d+\s+\S+ \S+ postfix\/smtpd\[\d+\]: warning:.*\[(\d+\.\d+\.\d+\.\d+)\]...