IP Reputation Poopulation
Posted: 02 Apr 2019, 20:37
I have the following question on how the IP Reputation files all.txt, etc get populated.
If an IP address triggers a BLOCK on one of my servers, does this automatically get reported to CXS? The reason I am asking, if a user enters their password wrong and gets blocked on our server, does CSF report that to the IP Reputation respiratory?
If it does report it, then if I unblock the IP address from CSF must I also run the command line --Rremove to remove that IP from the list or does CSF report it as unblocked to CXS lists?
I think I had a user where this happened and I had to also disable CSX IP Reputation because they were still being blocked.
I hope I explained this well enough. Thank you for any responses.
If an IP address triggers a BLOCK on one of my servers, does this automatically get reported to CXS? The reason I am asking, if a user enters their password wrong and gets blocked on our server, does CSF report that to the IP Reputation respiratory?
If it does report it, then if I unblock the IP address from CSF must I also run the command line --Rremove to remove that IP from the list or does CSF report it as unblocked to CXS lists?
I think I had a user where this happened and I had to also disable CSX IP Reputation because they were still being blocked.
I hope I explained this well enough. Thank you for any responses.