I have created a file /etc/csf/csf.custom.deny which contains a single line:
11.22.33.44 # LHB
Then in csf.deny at the top I have a line:
include /etc/csf/csf.custom.deny # do not delete
I then restart csf and lfd (this is on a cPanel system on Centos using ipset)
When I lookup the address 11.22.33.44 via CSF, it does not appear. And if I look in the ipset chain "chain_DENY" the address does not appear.
What am I doing wrong?
If I change csf.deny and add this ip address manually, and do a restart, it appears just fine. The include does not appear to work.