ConfigServer Community Forum

Hello Chirpy and Sarah,
just to let you know that CSF is not blocking IPs from Thailand, example:

Oct XX 11:51:12 server99 lfd[11184]: (mod_security) mod_security (id:990076) triggered by 1.0.128.41 (TH/Thailand/node-15.pool-1-0.dynamic.totbb.net): 3 in the last 3600 secs - *Blocked in csf* [LF_MODSEC]

And CSF is showing the following error:

ConfigServer Security & Firewall - csf v6.36 [1.0.128.41] is not a valid IP/CIDR

Checking on the IP origins, it shows:

IP Address assigned to: THAILAND
IP Address: 1.0.128.41 is located within the following Network:
Network: 1.0.128.0
CIDR: 1.0.128.0/17
Mask: 1.0.128.0/255.255.128.0
Network Range: 1.0.128.0 - 1.0.255.255
Total addresses: 32,768
Registrar: APNIC

Regards,
Sergio

Hi,

If you want to unblock an IP like this:
2001:067c:00e0:0000:0000:0000:0000:0005

From the GUI, it will return an error, it's not a valid IP/CIDR - if you use the real CIDR (2001:67c:e0::5/128) it will work.

Unblocking the IP 2001:067c:00e0:0000:0000:0000:0000:0005 from CLI works just fine, so seems to be a 'GUI only' issue.

This issue will be addressed in the next release. Thank you both for reporting it.

This should now be fixed in v6.37:
http://blog.configserver.com/?p=2085