Page 1 of 1

firewall might be allowing some IP's through

Posted: 23 Feb 2018, 15:38
by edwardsmarkf
hello -

every day or two, i gather up all the IP's from the wordpress security alert break-in attempts, then i report them at:

https://whatismyipaddress.com/ip/79.110.130.145 (example using 79.110.130.145)

then i put a six month (or 222 days) temporary block into csf.

however, the past several mornings i get a message that says:
csf: 79.110.130.145 is already temporarily blocked
i am wondering how an IP number that is temporarily blocked can even access wordpress? note that when i temporarily block my own IP number, i am not allowed in, so i know everything is working properly.

79.110.130.145
93.188.39.169
79.110.130.145

Re: firewall might be allowing some IP's through

Posted: 01 Mar 2018, 00:08
by edwardsmarkf
sorry for the silly question - firewall was down. i use csf through webmin, but webmin didnt realize firewwall was down,

https://serverfault.com/questions/68366 ... n-centos-7

systemctl unmask firewalld ; ## needed 'unmask' whatever that is.