ConfigServer Community Forum

Posted: **09 Jan 2022, 21:18**

In what order does CSF will be triggered if I have this config set:

CT_LIMIT = "100"
CT_INTERVAL = "10"
CT_SKIP_TIME_WAIT = "1"
CT_PORTS = "80,443"

SYNFLOOD = "1"

CONNLIMIT = "443;100,80;50"

PORTFLOOD = "443;tcp;20;3,80;tcp;20;3"

I also observe after adding CONNLIMIT and PORTFLOOD rule for port 443/80... CT_LIMIT doesn't work/block abused IP anymore.

Posted: **11 Jan 2022, 23:27**

When combined and both enabled, what are the suggested values for CT_LIMIT & CONNLIMIT?
Which one should be higher?

CT_LIMIT seems to stop blocking IP with both enabled.

ConfigServer Community Forum

Which rule should be triggered first CT_LIMIT/CONNLIMIT/PORTFLOOD?

Which rule should be triggered first CT_LIMIT/CONNLIMIT/PORTFLOOD?

Re: Which rule should be triggered first CT_LIMIT/CONNLIMIT/PORTFLOOD?