ConfigServer Community Forum

Thank Kdub, I'll try without IPSET to see if that helps. I have CentOS7 so I don't really understand what the issue is. Are you using cPanel or Plesk? They have great migration tools, I was able to migrate all of my clients to a new server with those :) I just found this announcement regarding chan...

Hey guys, I'm having the same issues - simply trying to block all access to the server except for US,CA, so in CC_ALLOW I have it set to: US,CA (+using LF_IPSET) - but I still get attacked from outside those countries. What is the point of using CC_ALLOW if it doesn't work? I still haven't solved t...

@mopa5000 Unfortunately, not. I continue to see IP addresses from outside the cc_allow_filter countries in the apache logs. I also continue to receive LFD notifications for failed login attempts from outside IPs. I tried disabling faststart in csf thinking maybe flushing everything would help, it ha...

I haven't been able to investigate too much. But looking at apache error logs I see Chinese IP addresses hammering away looking for exploits and files not currently on the server. LFD has also recently blocked Bulgarian and Vietnamese IP addresses, neither of which are in my the cc_allow_filter. Int...

Thanks phih for the quick reply. I also noticed after lfd adds the ip to the blocklist it is successfully blocked. In fact, the logs show the same 203.2.x.x ip hammered away with multiple connection attempts within the same second for about 45 minutes before it finally stopped. So I'm thinking maybe...

Did you ever resolve this? I just recently switched on ipset with geoblocking using allow filter for a handful of countries. I increased the LF_IPSET_MAXELEM to 80000 to accomodate the US geo-ip list. I also enabled use conntrack at the same time but made no changes to any block settings. Prior to m...