cdir block denied still triggers temp ip blocking emails
Posted: 20 Jul 2008, 17:25
I have noticed that when a cdir address (eg.67.210.3.1/24) is blocked in the csf deny list, continued hammering by ips within that subnet still trigger the csf temp ban emails. (eg. 67.210.3.66, and 67.210.3.69 will trigger temp bans if hammering even after subnet is denied.)
this could give an attacker a way to flush out the temp ban list even if the "flushing" subnet has benn permanentely banned
using centos enterprise 4.x
apache 2.x
cpanel 11.x
this could give an attacker a way to flush out the temp ban list even if the "flushing" subnet has benn permanentely banned
using centos enterprise 4.x
apache 2.x
cpanel 11.x
