temporary block

[arteryplanet]

wondering where csf store the blocked ip´s when you have temporary ban enabled? csf.deny i guess is for the permanent and i thought should be in csf.tempban but i do not see any ip on this one when i receive the blocked email alert.

Any idea?

Thanx!

[chirpy]

Well, /etc/csf/csf.tempban is the file that temporary bans are stored until they've times out, afterwhich time they are removed from the file. Restarting csf and lfd should always clear any temporary banned IP's.

[arteryplanet]

Thanx Chirpy!

[SevenSages]

thanks for the info.
A simple restart of csf will clear temporary blocks on csf and lfd.

Saves me time trying to find those mysterious temp blocks, like when there were too many ftp connections, etc.

[robocap]

Hello
thanks
how may with run one command clean all entry ip in csf?

Thanks

[robocap]

mv -f /etc/csf/csf.deny /etc/csf/csf.deny.old
then
service csf restart

this is true?
or have more command?

Thanks

[chirpy]

That would remove all the permanently denied IP's, though it's not very subtle.

To remove temporary ip blocks, use the new:

csf -tf

[cemper]

Hi,

we would need to utilize the temporary ban feature from the CLI,
but judging form our csf 3.02 help output there is no such command
to add it,

we would expect something like

-td [ip] [ttl in seconds]


Would it be possible to add this feature to an upcoming csf version?


Alternatively it'd be great to have a feature to remove from the blacklist,

i.e.


-dr [ip] remove an IP to be no more blocked from the /etc/csf.deny



thanks & best regards
Christoph C. Cemper

[chirpy]

The ability to remove temporary blocks is already in csf. The ability to add them manually is on the dev list.

[cPanel]

To remove temporary ip blocks, use the new:

csf -tf

But when you run

csf -tf

this remove ALL:

ALL temporary IP bans
and
ALL temporary IP allows

How remove only ONE IP from "temporary IP bans" ???

Thanks