blocking IPs not working
Posted: 18 Sep 2019, 17:38
everytime we add an IP to /etc/csf/csf.deny to be blocked 10 minutes or so later it's been removed and can't workout what's remving it ? would there be any reason for this to happen.
Some questions to help troubleshoot:
• Are there entries in lfd.log that correspond to the blocks and removals? Please provide a sample.
• What is your csf.conf settings for: PS_BLOCK_TIME, DENY_IP_LIMIT?
• How are you entering the IPs? Through UI, CLI or directly editing csf.deny? How are you formatting the entries?