ConfigServer Community Forum

Bastille wrote: ↑01 May 2018, 23:28 Have you done anything to tie the two together or are you just running the two separately for now?

If the two are running separately, this guide would probably be your best bet.

Bastille wrote: ↑02 May 2018, 19:53 That is the CSF management plugin for Directadmin and is unrelated to this. Unless you specifically run scripts, such as the one that I linked, to tie BFM into CSF, the two will not work together.

See: https://help.directadmin.com/item.php?id=527

It says you may use CSF or BFM on their own just fine but if you want to use both, you have to run scripts to tie BFM to CSF.

Bastille wrote: ↑03 May 2018, 01:35 What? The guide for integrating BFM into CSF will, at the end, make it so ANY block that BFM does winds up being properly implemented as a block in CSF (and subsequently blocked by the firewall).

Bastille wrote: ↑04 May 2018, 00:26 If you want to make any changes to the block settings for something, you would do it in the corresponding configuration page for that app.

CSF's settings are done directly through CSF's DA plugin.

BFM's are "Administrator Settings" and then under the Security header. Ignoring the automated password recovery option, the first cluster of options are indeed for blocking attempts at bruteforcing into DirectAdmin but that doesn't involve BFM. The second cluster is what ties into BFM and so if you wanted to adjust what triggers a BFM block, you would change those settings.

If you're looking for something like blocking an IP after only 5 attempts within 1 hour, you'd be better off making those changes in CSF. BFM's strength is (generally) monitoring attempts over a long period of time in order to issue a block.