The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to whitelist dynamic IPs & blacklist certain countries ?

Discussion in 'Security' started by almusammem, Feb 11, 2015.

  1. almusammem

    almusammem Registered

    Joined:
    Feb 11, 2015
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    How to whitelist dynamic IPs & blacklist certain countries ?

    Hi
    Is there any way to whitelist my IP addresses which are dynamic IPs and changes continuously ?
    Another thing: How to blacklist a particular country IPs such as China because I noticed that most of brute force comes from it ?
    Thanks

    - - - Updated - - -

    For WHM Panel
     
  2. mageshm

    mageshm Well-Known Member

    Joined:
    Apr 17, 2014
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Chennai, INDIA
    cPanel Access Level:
    DataCenter Provider
    @almusammem,

    Are you speaking about mod_security block. If so, you can whitelist the particular rule to username. For country block use CSF but most of the IP address in GEO database so you can't block the entire country.
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,814
    Likes Received:
    672
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  4. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    765
    Likes Received:
    20
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Re: How to whitelist dynamic IPs & blacklist certain countries ?

    With my dynamic IP at home, it appears that the first two octets remain constant.
    So in cphulk whitelist, add the first two octets as follows xxx.xxx.0.0/16

    in host access control add the same two octects but in the following format.
    xxx.xxx.0.0/255.255.0.0

    No disrespect, i'm assuming with only 1 post, this is all new to you. ??
    If this is the case, then i would highly recommend that you install CSF firewall, as a matter of importance.
     
    #4 keat63, Feb 12, 2015
    Last edited: Feb 12, 2015
Loading...

Share This Page