Use csf to block incoming hits to extra local IPs?

[Scott Galambos]

My servers main IP is say 204.11.xx.xxx. When I run ifconfig I have a bunch other IPs I've allocated to my server such as 204.11.xx.xxx,204.11.xx.xxx, 204.11.xx.xxx, etc. I don't use these IPs. should I block them with csf? how? I don't want to block anything incoming to my main IP of 204.11.xx.xxx. can I block these other IPs?

ifconfig example:
eno16780032:cp1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 204.15.xxx.xxx netmask 255.255.255.255 broadcast 204.15.xxx.xxx
ether 00:0c:29:3e:25:a1 txqueuelen 1000 (Ethernet)

eno16780032:cp2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 204.15.xxx.xxx netmask 255.255.255.255 broadcast 204.15.xxx.xxx
ether 00:0c:29:3e:25:a1 txqueuelen 1000 (Ethernet)
...

 

[dalem]

Just turn them off /remove them
add them back when you do use them
===========================
if you want to keep them at least configured
move them from cpanel's ip alias
to /etc/sysconfig/network-scripts as alias's
and set onboot to no

 

[cPanelMichael]

Hello,

The information in the previous post is solid advice. Note that CSF discussions are better suited for their own support forums at:

General Discussion (csf) - ConfigServer Community Forum

Thank you.