ConfigServer Community Forum

I agree, that would be cool

Here is a link from WHT thread were using this kind of block helped with DDoS post/get attacks

http://www.webhostingtalk.com/showthrea ... 234&page=3

as he noticed that all attacks had user agent string of IE 6.

It would be nice if you would add block/unblock by string in CSF, iptables example:

iptables -t raw -A PREROUTING -m string --algo bm --string string_that_you_are_filtering -j DROP

Did you check if all needed iptables modules are installed? I think test was something like /etc/csf/csftest. pl

Yes, you can create shell scripts that will block and unblock ip's and use CSF configuration options to call them BLOCK_REPORT i UNBLOCK_REPORT.

restart lfd also, not only CSF.

Yes that would be nice feature request, that block_report is called for every type of ban/unban.

You are right, thank you for the info. Now everything works as expected

1. Already set
2. I have it
3. I didn't have full paths. But I changed them, and it still script doesn't get called.

When i call my scripts from command line, they work fine.

Hm, i use csf -d and csf -dr to test this scripts, maybe they are called only when csf performs a ban?

I can only say that i have same issue without solution

I wanted to use BLOCK_REPORT and UNBLOCK_REPORT to also ban IP on my Cloudflare account, but scripts never get called.