ConfigServer Community Forum

perhaps you could use more than one dns server , the 2nd, alternate dns address pair pointing to a different box with a special page for banned users. might want to make the alt, address dns entry with a very low TTL/refresh setting as so users dont cache the entry too long. I haven't tried this, It...

oh ok I see now lol.
I had DROP_IP_LOGGING set to 1 just so we could see if one of our clients custom apps might require a specific port. I guess we will just put up with the numerous emails fo now
thanks chirpy

there could be any number of reasons why your images are being dropped/removed. you should try looking at the recieved emails and check for error messages or notices of removed content for starters. perhaps a mailserver configuration needs adjusting? or maybe your spam control or virus control syste...

I have noticed that when a cdir address (eg.67.210.3.1/24) is blocked in the csf deny list, continued hammering by ips within that subnet still trigger the csf temp ban emails. (eg. 67.210.3.66, and 67.210.3.69 will trigger temp bans if hammering even after subnet is denied.) this could give an atta...

fixed in version 3.31
thanks

Since the update to csf v 3.30 csf does not block failed login attempts to any service. here is an example of one of the 87 emails I found this morning. Time: Mon May 19 03:09:16 2008 IP: user (Unknown) Failures: 6 (pop3d) Interval: 240 seconds Blocked: Yes Log entries: May 19 03:09:08 server pop3d:...

GLOBAL_DENY = "http://www.listproviderdomain.com/list.txt"

would be proper

kewl csf -dr [IP] has arrived in v3.26
thanks chirpy

What about temp banning them instead, this feature is in there. 1000+ IPs? :p Way too many, IMO. I use the tempban option for other triggers. Max num of blocked ips is dynamicly changed depending on several other monitoring systems.(eg.durring a drddos attack). we have endured attacks consisting of...

Hey guys, I'm on dialup for alot of my time and use rather large deny lists(1000+ ips). when removeing a banned ip, it takes alongtime to upload the new deny list as well as display the full ruleset when flushing/restarting the firewall.(+20 seconds at times). just thought it would be most convenien...