The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

csf questions

Discussion in 'Security' started by Runes911, Nov 29, 2011.

  1. Runes911

    Runes911 Registered

    Joined:
    Nov 29, 2011
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I am adding IPs into my csf.deny, there was about 3900 of them. (china's whole IP range) I know that it uses a lot of resources on the server to have lops of IPs, but I only have 5 low traffic websites so the performance hit was unnoticeable.

    The problem I am having is: when I check the next day all of the IPs are gone except for 99 of them. Is there a script that clears the file? Where are they going?
     
  2. kernow

    kernow Well-Known Member

    Joined:
    Jul 23, 2004
    Messages:
    865
    Likes Received:
    9
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    By default, the max number of IPs that can be blocked is 100. Look in the csf config file and you can adjust this limit.
     
  3. ES - George

    ES - George Well-Known Member
    PartnerNOC

    Joined:
    Jun 12, 2011
    Messages:
    142
    Likes Received:
    1
    Trophy Points:
    16
    Location:
    UK
    cPanel Access Level:
    Root Administrator
    As said, CSF limits the maximum amount of IP's that can be added to csf.dny. - Simply go to the config and adjust the value to whatever suits your needs.
     
  4. minosjl

    minosjl Well-Known Member

    Joined:
    Jun 4, 2011
    Messages:
    168
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    cPanel Access Level:
    Root Administrator
    hi ,

    what about the county code deny option in the csf conf file , is that saves the time for adding the ip ranges individually in the server .Did you checked this feature ?
     
  5. k-planethost

    k-planethost Well-Known Member

    Joined:
    Sep 22, 2009
    Messages:
    199
    Likes Received:
    4
    Trophy Points:
    18
    Location:
    Athens Greece
  6. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,466
    Likes Received:
    196
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Why would he want to add "(china's whole IP range)" to that file?

    SECTION:Country Code Lists and Settings in CSF should be read and understood properly before using.
     
  7. k-planethost

    k-planethost Well-Known Member

    Joined:
    Sep 22, 2009
    Messages:
    199
    Likes Received:
    4
    Trophy Points:
    18
    Location:
    Athens Greece
    why not
    ?
    me i have hundreds of ips over there whole ranges.
    if you get 3-4 countries on CC_DENY csf takes ages to reload if you restart it
     
  8. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,466
    Likes Received:
    196
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    You do not add IPs to csf.ignore when you want to block them.

    From the top of that file:

     
  9. k-planethost

    k-planethost Well-Known Member

    Joined:
    Sep 22, 2009
    Messages:
    199
    Likes Received:
    4
    Trophy Points:
    18
    Location:
    Athens Greece
    yes you have right i hadnt notice that
     
Loading...

Share This Page