ConfigServer Community Forum

Hello,

Is it good to automatically deny IP with multi ports on the same service in one line instead of separate to two or three lines in case of LF_SELECT=1.

For example,
Normal:
tcp|in|d=25|s=1.1.1.1
tcp|in|d=465|s=1.1.1.1
tcp|in|d=587|s=1.1.1.1

To be:
tcp|in|d=25,465,587|s=1.1.1.1

This will help decrease number of line in csf.deny and not reach DENY_IP_LIMIT too fast.

Thanks.

This functionality is already supported in csf. See the "Advanced Allow/Deny Filters" section of readme.txt (it's the last example).

Yes it's supported but from my understanding it must be manually added.
Does it support for LFD when adding an IP?