Recent content by Jose Maria Sarachaga

  1. J

    Question modsecurity enabled via plesk web, but off via ssh command line

    Hello everyone I'm just curious, i have enabled modsecurity on all my websites and i can see it's working in the log files. Today i happened to run: plesk bin nginx -s to get a list of all the modules installed and their status and found modsecurity shows as OFF: brotli on...
  2. J

    Question Block IP via SPF local rules

    Hello everyone I'd like to block incoming email from certain IP's via SPF local rules in Plesk. Currently i'm blocking these IP's via Plesk Firewall and is working fine, BUT i have no trace of it. By blocking on Firewall the connection is never established nor logged, and if i could block via...
  3. J

    Question How to prevent logged users from sending email from a different account in the server

    Hi I see in Postfix a logged in postfix user is able to send email with any From: address they want, they could even send from another domain on the same server. Is it possible to prevent this? Regards
  4. J

    Question How to reject mail from nonexistent domains in postfix

    Hello I'm receiving emails from nonexistent domains, for example: finanzas5@factura.6740291 that's clearly a nonexistent domain, and the mail log says: spf=none (sender IP is 45.8.126.20) If i check on mxtoolbox.com i see there's no SPF record published, that's not even a valid domain. Regards
  5. J

    Question Run cron task under limited subscription system account

    Hello everyone I created a subscription with a system user "subsuser" and PHP scripts run under that account. I'm trying to set a cron job to run under the same account i cannot see the "subsuser" account in the combobox son for now i have to run it under root account. Any hint?
  6. J

    Question Track who changed an email password and when

    Today i have this problem, change of passwords of all accounts in a domain, this looks malicious to me
  7. J

    Question How to reject domains with several SPF records

    Hello everyone I'm using Plesk Obsidian Version 18.0.38 Update #3 with SPF checking enabled. I just received a maliciuos email from a domain that has 2 SPF records. Having 2 SPF records is invalid, just like having a long one, but the message got authenticated and made it through. How can i...
  8. J

    Question Excessive fail2ban banned hosta may flood memory?

    Thanks for your reply. Yes I’m aware of recidive, I will change the approach to what you suggest, I agree there will be a lot fewer hosts.
  9. J

    Question Excessive fail2ban banned hosta may flood memory?

    Hello guys I'm using fail2ban in Plesk working pretty smoothly. I extended BAN period to months (instead of just some minutes), and the list of banned hosts grows as expected. At this time the list of banned hosts is about 8K, not a problem at all, for now. My question is if an excessive...
  10. J

    where are the mail alias stored?

    Thank you very much. Since my install was completely broken, instead of having to recover psa database, I also found that aliases can be found in /var/lib/psa/dumps/domains/XXXXXX/backup_info_XXXXX.xml
  11. J

    where are the mail alias stored?

    thanks for the answer, i need that too.
  12. J

    Resolved Change SUBJ_ALL_CAPS score serverwide

    Hello everyone In Mexico people have the bad habit of writing ALL CAPS, and this is causing me to have false-possitives on SPAM scoring using Plesk Onyx 17 with SPAMASSASSIN. I'd like to lower the weight of SUBJ_ALL_CAPS. I know there's some config file to do this, or some section under Plesk...
See more
Back
Top