ConfigServer Community Forum

Some sort of distributed blocking would be nice too. I get tons of mails from the same bots scanning all my servers now.

Hi,

Could you add a function to tempban IPs? I'd like to implement this into my bot-trap on certain big sites.

Maybe it's wise to check csf.tempban before temporary banning it again?

Hi,

Could you add some sort of REGEX matching for things like csf.pignore?

chirpy wrote:csf.tempban is a temporary file that lfd uses to keep track of the temporary bans it has in place.

I understand, but i get multiple mails every minute while it's already blocked. Probably because the too many connection are still timing out?

Does csf look at csf.tempban before it blocks an IP? I sometimes get a dozes emails about an IP that is blocked with too many connections. And it is then also listed a dozen times in csf.tempban.

chirpy wrote:It's on the development list.

Great. Thanks.

Any chance on this?

Add it to the ignore list. Too many connections is part of lfd.

Hi,

Could you add a global csf.gignore like allow, or have csf.gallow also work in lfd?