New CC_DENY ASN not working properly.

[marcele]

It seems in my testing that the new ASN stuff in CSF 8.12 isn't working properly.

Eg: Added ASN AS2635 to CC_DENY. Then restart CSF and LFD. From LFD.log:

Code: Select all

Jan 20 03:14:17 plesk125 lfd[15936]: CC: Extracting zone from GeoLite CSV Country/ASN database for [AS2635]
Jan 20 03:14:17 plesk125 lfd[15936]: CC: Repopulating ipset cc_as2635 with IP addresses from [AS2635]
Jan 20 03:14:17 plesk125 lfd[15936]: IPSET: loading set new_as2635 with 6 entries
Jan 20 03:14:17 plesk125 lfd[15936]: IPSET: switching set new_as2635 to cc_as2635
Jan 20 03:14:17 plesk125 lfd[15936]: *Error* IPSET: [ipset v6.11: Sets cannot be swapped: the second set does not exist]

CSF --status doesn't have any chains with the new ASN. And csf --grep <ip> shows that the IP address isn't blocked.

Restarting LFD and CSF afterwards has no effect.

[ForumAdmin]

That error strongly suggests that you did not restart csf and then lfd in the correct order as it is csf that initially creates the second ipset set, that is exactly the error you get when this is done incorrectly.

You should find if you now restart csf and then lfd it will work.

[marcele]

Yep you are right. Thanks!