[BlueOnyx:16412] Re: Blueonyx Digest, Vol 71, Issue 7

[Darren Shea]

Maurice,
   Thank you for pointing me to the appropriate files -  I ended up turning
off the Ban Engine completely, as the Configuration.html documentation
didn't seem to allow me to make a precise hole for just the IPs of the
monitoring system.  My Nagios was originally trying to log on once every 4
minutes, and even pushing it out to once every 12 didn't seem to help, so I
know it wasn't the DDoS rules that were causing the issue, and none of the
various "Max..." settings clearly lined up with the specific error or
symptom I was seeing. Still, I didn't have the Ban Engine before, so I don't
think I will miss it now.

Thank you,
    Darren

-----Original Message-----
From: blueonyx-bounces at mail.blueonyx.it
[mailto:blueonyx-bounces at mail.blueonyx.it] On Behalf Of
blueonyx-request at mail.blueonyx.it
Sent: Wednesday, November 05, 2014 9:27 AM
To: blueonyx at mail.blueonyx.it
Subject: Blueonyx Digest, Vol 71, Issue 7
------------------------------

Message: 4
Date: Tue, 04 Nov 2014 21:59:11 +0100
From: Maurice de Laat <mdlaat at muisnetwerken.nl>
Subject: [BlueOnyx:16407] Re: Upgraded FTP, now it's all touchy
To: BlueOnyx General Mailing List <blueonyx at mail.blueonyx.it>
Message-ID: <54593E1F.3080102 at muisnetwerken.nl>
Content-Type: text/plain; charset=windows-1252; format=flowed

Hello Darren,

On 04-11-14 21:14, Darren Shea wrote:
> So, I managed to run the latest Yum updates earlier today, and now, my 
> Nagios monitoring of the FTP service on the 5208 server has begun 
> replying with the following error: " FTP WARNING - Unexpected response 
> from
> host/socket: 530 Stop connecting so frequently!" - is that adjustable 
> in some way? Whitelisted IPs, altering timeouts, anything?

You can edit the mod_ban configuration in the files /etc/proftpd.conf and
/etc/proftpds.conf

There you can find a rule that bans clients which connect too frequently.
This rule bans clients which connect more than 30 times within one minute.
--
Maurice