Need some info about cfg block alert

Portal Home > Knowledgebase > Articles Database > Need some info about cfg block alert

Posted by Jaffery, 01-17-2013, 10:59 AM
Hi, I am seeing this block alert mail on one the VPS I manage, I am not sure about kind of connection is that? PS : 123.123.123.123 is pseudo server address Last edited by Jaffery; 01-17-2013 at 11:02 AM.
Posted by mike86, 01-17-2013, 11:37 AM
It is someone trying to connect to TCP port 26 on 123.123.123.123, it seems they have tried to connect 11 times from your text (Hits: 11).
Posted by BestServerSupport, 01-17-2013, 11:51 AM
Port 26 is used for alternative SMTP port.
Posted by Jaffery, 01-17-2013, 12:14 PM
And I guess that port is blocked in firewall so he / she is blocked by CSF ? EDIT: So I guess I now understand its full syntax and reason, yap its not allowed in CSF and someone is trying to use it so its blocked. Btw, should I allow that port .. is it a legit block by CSF ?
Posted by BestServerSupport, 01-17-2013, 12:34 PM
Yes, it is certainly legit block by CSf if you are not using alternative SMTP port at all. There is a setting in CSF config file [PS_LIMIT] to increase the limit of PortScan.