perma blocking from temp blocking flushes all temp bans
Posted: 08 Oct 2010, 08:07
Hi
I'm using csf 5.10 generic on ubuntu 9.10.
At one point I had the following output from csf -t
DENY 65.41.109.0/24 * in 29d 18h 30m 18s Manually added
DENY 89.35.51.15 * in 15m 8s lfd - *Port Scan* detected from 89.35.51.15 (RO/Romania/-). 6 hits in the last 155 seconds
Then after the port scan was removed they scanned again, the lfd log reported
(PERMBLOCK) 89.35.51.15 has had more than 2 temp blocks in the last 86400 secs - *Blocked in csf*
However this then removed both the manual ban and the port scan.
I'm using csf 5.10 generic on ubuntu 9.10.
At one point I had the following output from csf -t
DENY 65.41.109.0/24 * in 29d 18h 30m 18s Manually added
DENY 89.35.51.15 * in 15m 8s lfd - *Port Scan* detected from 89.35.51.15 (RO/Romania/-). 6 hits in the last 155 seconds
Then after the port scan was removed they scanned again, the lfd log reported
(PERMBLOCK) 89.35.51.15 has had more than 2 temp blocks in the last 86400 secs - *Blocked in csf*
However this then removed both the manual ban and the port scan.