Problem with PORTFLOOD

[mostafan]

Hello

I recently decided to set PORTFLOOD for my Dedicated server (with WHM). So I input bellow values :

Code: Select all

80;tcp;20;5, 443;tcp;20;5

The problem is that in none SSL sites Flood controlling work nicely but in HTTPS site not working!

I want to mention :
For the test, I keep F5 key in Firefox (home page of site) and load average of CENTOS 7 wll increase immediately in https website but for other http sites? no problem occurs.

Thank you in advance for any help....

[mostafan]

For the record this is output of command : /etc/csf/csftest.pl

Code: Select all

[root@server1 xt_recent]# /etc/csf/csftest.pl
Testing ip_tables/iptable_filter...OK
Testing ipt_LOG...OK
Testing ipt_multiport/xt_multiport...OK
Testing ipt_REJECT...OK
Testing ipt_state/xt_state...OK
Testing ipt_limit/xt_limit...OK
Testing ipt_recent...OK
Testing xt_connlimit...OK
Testing ipt_owner/xt_owner...OK
Testing iptable_nat/ipt_REDIRECT...OK
Testing iptable_nat/ipt_DNAT...OK

RESULT: csf should function on this server

I also checked that my SSL port is 443
Seems that nobody has issue with this problem :/

[mostafan]

I found out the reason myself!

It's because mod_http2 module on Apache that was enabled,
I disabled it temporary and now "CSF Portflood" working!

Can we consider it a bug? or http2 (SPDY) is not a TCP protocol?