ConfigServer Community Forum

Hello,

I use on two servers an almost identical configuration, however on one of them it recently started to have false pozitives somehow and 100+ of my visitors when they access the main page of one of the websites(an index.html page) gets banned and the message that appears to me is lfd on hostname: ip (provider) blocked for port scanning

Somehow it started to give false pozitives, the issue is very big for me.

We are really happy/proud to use your software and your help in this would be great , I need to fix this, it can't give false pozitives just for accessing index.html page on port 80 .

I have temporary stoped the firewall so my visitors can access the website, please let me know how should I proceed , people just can't be blocked for simple accessing a website.

Thank you very much in advance!

same problem here

over the last two months the firewall with CSF/ LSD has
been falsely flagging 'innocent' ips and blocking them

today, it 'blocked ME'!

my members have been complaining and threatening to CANCEL
their membership because their customers cannot see their websites

1. why is the firewall blocking 'good' ips and what can i do to stop that?

2. when the firewall puts a 'temporary block' for 3600 seconds...

a. is there a way to lengthen the blocking time?


b. is there a way to bypass the 'temporary block' and just
send all ips that are violating the rules directly to a 'permanent block status'?

thanks for your help!