Blocking synflood with CSF

K

Kidades

Registered
Feb 24, 2017
3
0
1
Serbia
cPanel Access Level
Root Administrator
My server is currently under a synflood attack. I've enabled synflood protection in CSF with the following settings

SYNFLOOD = On
SYNFLOOD_RATE = 20/s
SYNFLOOD_BURST = 10

It seems to be successfully detecting them, as my log/messages is filled with
... server kernel: [ 944.509361] Firewall: *SYNFLOOD Blocked* IN=eth0 ...

However, those IPs are not getting blocked (added to the deny list). I have to manually add them in order to stop the attack.

How can I make CSF automatically add the IP to the block list once a synflood attack from it is detected?
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
G Blocking IP doesn't work Security 1
A CSF/LFD blocking mail sent on online web form via SMTP Security 3
A Blocking access to all WordPress sites on a cPAnels erver Security 3
J CBL Blocking IP Address Security 2
G CSF's CC_ALLOW_FILTER blocking cURL Security 1
Similar threads
Blocking IP doesn't work
CSF/LFD blocking mail sent on online web form via SMTP
Blocking access to all WordPress sites on a cPAnels erver
CBL Blocking IP Address
CSF's CC_ALLOW_FILTER blocking cURL
Top Bottom