How to increase csf.deny capacity on WHM

[ovan]

Hello,

i use CSF plugin in my WHM, and recently my server has got thousands of login failure attacks. i assumed this is a ddos or brute force attack, every attackers ip has been permanently blocked by CSF.
but the csf.deny capacity is only for 1000 ip, and the attackers ip are more than thousands.

How to increase the csf.deny blocked ip capacity.?
because cphulk doesn't help muh

 

[es2alna]

I guess you better start using CC_DENY and block some countries.

 

[cPanelMichael]

Hello

You may want to ask this question on the ConfigServer forums to get more input from the developers/users of the application. I found the following thread which might offer some advice:

ConfigServer Community Forum - csf.deny ip address deny limit

Thank you.

 

[quizknows]

in /etc/csf/csf.conf adjust the DENY_IP_LIMIT setting, then restart csf/lfd

It may complain if you set it very high, but if you are on a good dedicated server it should not be an issue to raise it higher.

 

[robb3369]

I'd sort the list and start blocking subnets... But if its more "drive by" style, just set the temp ban longer and remove the older permanent ones.