ConfigServer Community Forum

I see that csf blocked ips are logged in /var/log/messages.
Is there a way to have it log the name of the blocklist that triggered the block?
I am using /etc/csf/csf.blocklists to specify blocklists.
something like iptables "LOG --log-prefix "some name: " ?

thanks.

You can see the name of the list if you search the IP at CSF tool, "Search for IP".

If blocked, it will output the occurrence, ie:

IPSET: Set:bl_PHISHIPS Match:14.154.94.125 Setting:PHISHIPS file:/etc/csf/csf.blocklists

Showing the block list name that blocked the IP.

Sergio

Thank you Sergio.

Is that in a logfile somewhere? I don't know the IP to search for. Also would like to tail a file and see blocks that are occurring for a particular blocklist.