Page 1 of 1

CXS_LF_CXS IP blocked

Posted: 09 Sep 2020, 19:37
by SreejithChandra
Hello,

We have a server with IP reputation system activated.

One of the client's IP got blocked in the firewall in chain CXS_LF_CXS.

The IP doesnt have any history of getting blocked in the server in lfd.log.

Earlier, we could remove these blocked IPs by using cxs -Rremove <IP>.

But this block is not removed. Also, this happens repeatedly.

Can someone explain how the reputation system works or how the IP got added to this chain?

Re: CXS_LF_CXS IP blocked

Posted: 09 Sep 2020, 19:38
by SreejithChandra
Note, the IPs we removed earlier from the reputation system was present on CXS_ALL. Not in CXS_LF_CXS