ConfigServer Community Forum

Connection Tracking set to 100 connections, exclude time_wait. The same IP was blocked twice, got 2 separate emails, 2 seconds apart:

20:37:39
20:37:41

How come the blocked IP doesn't appear in Firewall Deny IPs?

Do you have CT_PERMANENT set to 0? Temporary bans do no show up in Firewall Deny IPs. They are stored in /etc/csf/csf.tempban