The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CSF question re banned IP addresses.

Discussion in 'General Discussion' started by Brook, Jun 26, 2009.

  1. Brook

    Brook Well-Known Member

    Joined:
    Apr 22, 2005
    Messages:
    99
    Likes Received:
    0
    Trophy Points:
    6
    We have installed CSF (Configserver Security Firewall) on our server (as a cpanel plug-in) and it's been sending me some emails about some banned IP addresses:

    What does this actually mean? Is it definitely an attack? 230 open connections? Is it the same as hits?

    It's banned about 8 IP's and interestingly they come from an education establishment's ISP and another two ISPs that all resolve to the same geographical area! Which is what makes me think this is a calculated attack.

    Also the odd thing is, even tho it's banned these IPs - it keeps sending me an email with them saying it's banned them again... are they just temporarily banned?

    Thanks in advance!
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,469
    Likes Received:
    197
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    You'll have more luck over at the CSF forums for questions like this.
    ConfigServer Scripts Forum - Powered by vBulletin Reading the manual is always a good idea too.
    http://www.configserver.com/free/csf/readme.txt

    You can set it to the number of connection(s) tracking you like, how to block temp or perm, along with lots more. Just needs to be looked at a few hundred times and tweaked as you go for your own system.

    If you're in a hurry, open CSF, click Firewall Security level, click high. Then save. Good solid starting point that you can tweak later to your own tastes.

    GL
     
  3. PlatinumServerM

    PlatinumServerM Well-Known Member
    PartnerNOC

    Joined:
    Jul 10, 2005
    Messages:
    397
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    New Jersey, USA
    cPanel Access Level:
    Root Administrator
  4. Brook

    Brook Well-Known Member

    Joined:
    Apr 22, 2005
    Messages:
    99
    Likes Received:
    0
    Trophy Points:
    6
    Thanks for the replies. I've looked at the readme file, but it doesn't explain the connections. Also posted on the CSF forum, but no answer.

    Anyone here know what these connections actually are?
     
Loading...

Share This Page