so we use csf on one of our servers to test run it.
i noticed there was an option to show a ban page,
How does this work?
the issue is when a user gets banned from our servers they dont see no message to tell them about it, all they see is a messagee telling them the connection timed out, then i get people leaving thinking we are no longer there.
i want them to see some sort of messsage informing them there banned ?
firewall ban
-
- Junior Member
- Posts: 80
- Joined: 22 Aug 2019, 21:43
Re: firewall ban
Please refer in csf.conf to:
Messenger service
This feature allows the display of a message to a blocked
connecting IP address to inform the user that they are blocked in the
firewall. This can help when users get themselves blocked, e.g. due to
multiple login failures. The service is provided by two daemons running on
ports providing either an HTML or TEXT message
This feature does not work on servers that do not have the iptables module
ipt_REDIRECT loaded. Typically, this will be with MONOLITHIC kernels. VPS
server admins should check with their VPS host provider that the iptables
module is included
For further information on features and limitations refer to the csf
readme.txt
Note: Run /etc/csf/csftest.pl to check whether this option will function on
your server.
[I have no experience with this feature, but this seems to be what you are asking for. HTH]
Messenger service
This feature allows the display of a message to a blocked
connecting IP address to inform the user that they are blocked in the
firewall. This can help when users get themselves blocked, e.g. due to
multiple login failures. The service is provided by two daemons running on
ports providing either an HTML or TEXT message
This feature does not work on servers that do not have the iptables module
ipt_REDIRECT loaded. Typically, this will be with MONOLITHIC kernels. VPS
server admins should check with their VPS host provider that the iptables
module is included
For further information on features and limitations refer to the csf
readme.txt
Note: Run /etc/csf/csftest.pl to check whether this option will function on
your server.
[I have no experience with this feature, but this seems to be what you are asking for. HTH]