Portscan doesn't put denied ip in "csf.deny"

Post Reply
s0fy
Junior Member
Posts: 1
Joined: 06 Oct 2016, 13:41

Portscan doesn't put denied ip in "csf.deny"

Post by s0fy »

Hello,

Tested on 3 servers. centos6 and centos7
if someone got banned for portscanning , his IP doesn't sent to "csf.deny" file. and of course you can't unblock it's IP or find it in /etc/csf/csf.deny , it just shows in /var/log/lfd that this IP is blocked.

However there's no way to unblock it by anyway because it doesn't in /etc/csf/csf.deny, and csf -tr doesn't work too.....and you have to disable the entire csf rulez because you can't remove the blocked ip!

version : v9.24

Would you please fix that?
Thanks.
ForumAdmin
Moderator
Posts: 1524
Joined: 01 Oct 2008, 09:24

Re: Portscan doesn't put denied ip in "csf.deny"

Post by ForumAdmin »

We are unable to recreate any issues with the port scanning blocking which uses a common procedure to block in csf with all the other methods. This would suggest a configuration issue where you have csf installed.

It might help if you post your PS_* settings. If you see frequent blocks, it could also simply be a case of you setting DENY_IP_LIMIT too low.
Post Reply