Search found 7 matches

by stmx
09 Jul 2016, 19:12
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

Re: CSF IP Blocking on VPS

CSF can't block any massive attack, it's just can be used for small DDoS atacks 5-25 Mb/s. Attack on my site more than 800 Mb/s so CSF can't help with this. Hardware firewall is too expensive and requires special settings and time to mitigate attack. So, I found best solution. It's CloudFlare firewa...
by stmx
06 Jul 2016, 22:43
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

Re: CSF IP Blocking on VPS

I have blocked some IPs using CloudFlare firewall. After that, these IPs can't reach my server. I also tried to use iptables to block these IPs without luck before. Ok, this is not CSF bug but I never think that this is possible - firewall should block network addresses, why certain IP can not be bl...
by stmx
06 Jul 2016, 21:56
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

Re: CSF IP Blocking on VPS

Thanks for reply. I just want to block these IPs, I do not want to buy hardware firewall for 1000-2000 ips botnet. This not a problem for dedicated server to block small botnet. I do not think that this is cached logs problem. I restarted nginx many many times so logs still record some IPs that CSF ...
by stmx
06 Jul 2016, 21:24
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

Re: CSF IP Blocking on VPS

Just for example: Live output from access.log of nginx: 119.207.122.52 - - [06/Jul/2016:23:21:03 +0300] GET / HTTP/1.1 "200" 10103 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" "119.207.122.52&q...
by stmx
06 Jul 2016, 21:07
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

Re: CSF IP Blocking on VPS

Still waiting reply from anyone from CSF team. Maybe this is not a bug, just incorrect settings or something else.
by stmx
06 Jul 2016, 20:38
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

Re: CSF IP Blocking on VPS

I used CloudFlare with "I'm under attack" function. This is helped, but not at all. I can mitigate attack using software firewall but I ran into a problem that has already been observed before on other servers. Looks like this is CSF bug which should be investigated by experts or developer...
by stmx
06 Jul 2016, 20:26
Forum: General Discussion (csf)
Topic: CSF IP Blocking on VPS
Replies: 10
Views: 8051

CSF IP Blocking on VPS

Hello friends, Please help me to mitigate DDoS attack. I used own script which parse access.log and block IPs in default way - "csf -d <IP>" The problem is CSF (latest cpanel version) can't block some IPs, every time I got error: -- deny failed: <IP> is in already in the deny file /etc/csf...