Virtual Architects Support Wiki

User Tools

Site Tools

You are here: start » internet » mail » mailcleaner_csf
Trace:
internet:mail:mailcleaner_csf

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Last revision Both sides next revision
internet:mail:mailcleaner_csf [2021/02/08 09:23]
gcooper 		internet:mail:mailcleaner_csf [2021/08/03 12:33]
gcooper
Line 15: Line 15:
 <note>CSF and this howto are probably **most beneficial when using MailCleaner as a bastion host** with a public IP address.  If you are running your MailCleaner privately behind a NAT firewall and port-forwarding, this may not be worth the trouble for you.  If you build a MailCleaner cluster, you may want to implement CSF clustering as well.</note> <note>CSF and this howto are probably **most beneficial when using MailCleaner as a bastion host** with a public IP address.  If you are running your MailCleaner privately behind a NAT firewall and port-forwarding, this may not be worth the trouble for you.  If you build a MailCleaner cluster, you may want to implement CSF clustering as well.</note>
  
-===== Disable MailCleaner Firewall =====+===== Disable Old Services ===== 
 + 
 +==== Disable Firewall ====
  
 <file> <file>
Line 31: Line 33:
 <file> <file>
 /usr/mailcleaner/etc/init.d/firewall stop /usr/mailcleaner/etc/init.d/firewall stop
-/usr/mailcleaner/etc/init.d/fail2ban stop 
 systemctl disable firewalld.service systemctl disable firewalld.service
 +</file>
 +
 +==== Disable Fail2Ban ====
 +
 +<file>
 +vim /usr/mailcleaner/etc/init.d/fail2ban
 +</file>
 +
 +Add at the top below ''#! /bin/sh'' and the initial comments:
 +
 +<file>
 +# We will use LFD for log file monitoring, so exiting this script
 +logger "MailCleaner fail2ban disabled in /usr/mailcleaner/etc/init.d/fail2ban"
 +exit 0
 +</file>
 +
 +<file>
 +/usr/mailcleaner/etc/init.d/fail2ban stop
 systemctl disable fail2ban.service systemctl disable fail2ban.service
 </file> </file>
Line 112: Line 131:
 </file> </file>
  
-<note warning>If you plan to enable a large number of blocklists, you should make sure to install/enable ''ipset'' (as documented on this page) and keep track of your system memory usage.</note>+<note warning>If you plan to enable a large number of addresses, you should make sure to install/enable ''ipset'' (as documented on this page) and keep track of your system memory usage.</note>
  
 We uncomment (enable) the following lists: We uncomment (enable) the following lists:
internet/mail/mailcleaner_csf.txt · Last modified: 2024/01/12 06:15 by gcooper

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki