I cannot see how I can enter a range of IP's to Block i.e. 123.125.71.0/100
When I enter it in the QUICK DENY box it refuses to acknowledge the request, written as above?
Can anyone help please..
regards
How Can I block an IP Range?
-
- Moderator
- Posts: 1524
- Joined: 01 Oct 2008, 09:24
Re: How Can I block an IP Range?
You have to use CIDRs to block a range of IPs.
-
- Junior Member
- Posts: 3
- Joined: 09 Apr 2015, 18:33
Re: How Can I block an IP Range?
where do I find that ? ( sorry complete novice)
Re: How Can I block an IP Range?
add a line for /etc/csf.deny that you want to ban ip range..
example
vi /etc/csf.deny
###############################################################################
# Copyright 2006-2015, Way to the Web Limited
# URL: http://www.configserver.com
# Email: sales@waytotheweb.com
###############################################################################
# The following IP addresses will be blocked in iptables
# One IP address per line
# CIDR addressing allowed with a quaded IP (e.g. 192.168.254.0/24)
# Only list IP addresses, not domain names (they will be ignored)
#
# Note: If you add the text "do not delete" to the comments of an entry then
# DENY_IP_LIMIT will ignore those entries and not remove them
#
# Advanced port+ip filtering allowed with the following format
# tcp/udp|in/out|s/d=port|s/d=ip
#
# See readme.txt for more information regarding advanced port filtering
192.168.0.0/24
example
vi /etc/csf.deny
###############################################################################
# Copyright 2006-2015, Way to the Web Limited
# URL: http://www.configserver.com
# Email: sales@waytotheweb.com
###############################################################################
# The following IP addresses will be blocked in iptables
# One IP address per line
# CIDR addressing allowed with a quaded IP (e.g. 192.168.254.0/24)
# Only list IP addresses, not domain names (they will be ignored)
#
# Note: If you add the text "do not delete" to the comments of an entry then
# DENY_IP_LIMIT will ignore those entries and not remove them
#
# Advanced port+ip filtering allowed with the following format
# tcp/udp|in/out|s/d=port|s/d=ip
#
# See readme.txt for more information regarding advanced port filtering
192.168.0.0/24