Log blocklist name

Post Reply
hosthead
Junior Member
Posts: 2
Joined: 05 Feb 2025, 00:27

Log blocklist name

Post by hosthead »

I see that csf blocked ips are logged in /var/log/messages.
Is there a way to have it log the name of the blocklist that triggered the block?
I am using /etc/csf/csf.blocklists to specify blocklists.
something like iptables "LOG --log-prefix "some name: " ?

thanks.
Sergio
Junior Member
Posts: 1740
Joined: 12 Dec 2006, 14:56

Re: Log blocklist name

Post by Sergio »

You can see the name of the list if you search the IP at CSF tool, "Search for IP".

If blocked, it will output the occurrence, ie:
IPSET: Set:bl_PHISHIPS Match:14.154.94.125 Setting:PHISHIPS file:/etc/csf/csf.blocklists
Showing the block list name that blocked the IP.

Sergio
hosthead
Junior Member
Posts: 2
Joined: 05 Feb 2025, 00:27

Re: Log blocklist name

Post by hosthead »

Thank you Sergio.

Is that in a logfile somewhere? I don't know the IP to search for. Also would like to tail a file and see blocks that are occurring for a particular blocklist.
Post Reply