Use csf to block incoming hits to extra local IPs?

Scott Galambos

Well-Known Member
Jul 13, 2016
86
3
8
Canada
cPanel Access Level
Root Administrator
My servers main IP is say 204.11.xx.xxx. When I run ifconfig I have a bunch other IPs I've allocated to my server such as 204.11.xx.xxx,204.11.xx.xxx, 204.11.xx.xxx, etc. I don't use these IPs. should I block them with csf? how? I don't want to block anything incoming to my main IP of 204.11.xx.xxx. can I block these other IPs?

ifconfig example:
eno16780032:cp1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 204.15.xxx.xxx netmask 255.255.255.255 broadcast 204.15.xxx.xxx
ether 00:0c:29:3e:25:a1 txqueuelen 1000 (Ethernet)

eno16780032:cp2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 204.15.xxx.xxx netmask 255.255.255.255 broadcast 204.15.xxx.xxx
ether 00:0c:29:3e:25:a1 txqueuelen 1000 (Ethernet)
...
 
Last edited by a moderator:

dalem

Well-Known Member
PartnerNOC
Oct 24, 2003
2,976
152
368
SLC
cPanel Access Level
DataCenter Provider
Just turn them off /remove them
add them back when you do use them
===========================
if you want to keep them at least configured
move them from cpanel's ip alias
to /etc/sysconfig/network-scripts as alias's
and set onboot to no