tempban

guidob · Post by **guidob** » 14 Nov 2007, 14:45

Does csf look at csf.tempban before it blocks an IP? I sometimes get a dozes emails about an IP that is blocked with too many connections. And it is then also listed a dozen times in csf.tempban.

Post by **chirpy** » 16 Nov 2007, 16:17

csf.tempban is a temporary file that lfd uses to keep track of the temporary bans it has in place.

guidob · Post by **guidob** » 17 Nov 2007, 17:01

chirpy wrote:csf.tempban is a temporary file that lfd uses to keep track of the temporary bans it has in place.

I understand, but i get multiple mails every minute while it's already blocked. Probably because the too many connection are still timing out?

Post by **chirpy** » 17 Nov 2007, 22:19

I would imagine that that is the reason for the repeated blocks. It will probably depend on the type of connection states that are contributing to the block limit being reached for the IP.

guidob · Post by **guidob** » 18 Dec 2007, 14:56

Maybe it's wise to check csf.tempban before temporary banning it again?