APF and Multiple IPs with Cpanel - How?!

[JonathanLIVE]

I used to use APF... until I found it to be as effective as hiding behind a rosebush from a shotgun when scanners and hackers would hit a server that has multiple IP addresses aliased to it.

APF only binds to the main server IP and completely ignores cpanels ipalias IPs.

So when a scanner hits a server with something like 32 or more IPs, it gets hit hard enough to degrade the servers performance significantly.. at times if they are more aggressive they even bring down a server.

I went through documentation, but found no solution to have APF bind to multiple IPs on a server.

I could be totally wrong.. but it would be great if someone managed to do this. The only thing that seems to work system wide is iptables.. but that is difficult to configure.

Can anybody offer a howto for having APF cover multiple IP addresses on a Cpanel server?

Thanks!

[sawbuck]

Have you considered CSF?

http://www.configserver.com/cp/csf.html

[Alexandre]

Actually, I don't like csf ))
iptables -F makes the server inaccessible)