CC_ALLOW_FILTER not working.
# An alternative to CC_ALLOW is to only allow access from the following
# countries but still filter based on the port and packets rules. All other
# connections are dropped
OS: AlmaLinux 8.5 cPanel 102.0.14
also using it with Proxmox Virtual Environment 7.2.
Debian 11.3 "Bullseye" but using a newer Linux kernel 5.15.30,
QEMU 6.2, LXC 4
Both are using- CSF Version: csf: v14.16
and I have seen the issue with both.
Settings in csf.conf
FASTSTART = "1"
LF_IPSET = "1"
CC_ALLOW_FILTER = "US"
also tried
FASTSTART = "0"
LF_IPSET = "1"
CC_ALLOW_FILTER = "US"
Maxmind license activated as well
Traffic from other countries is still logging entries trying to access ssh to server and ports.
I needed to also add in CC_DENY = SG,CN,RU,IN,KP,KR,JP to get them to stop
I saw this was an issue and was fixed last Year, but maybe because of another post of Maxmind getting some updates in next version of CSF for a bug with not correct ASN for some countries or IP's/ might this be the issue as well?
Thanks for your time in checking on this as well.
Much appreciated
Kind Regards,
Spiro