Temporary ban not complete ban.
Posted: 24 Mar 2014, 06:28
Hi,
just to report the following.
When an IP is added to the temporary list CSF.TEMP, the firewall rules created are as follow:
just to report the following.
When an IP is added to the temporary list CSF.TEMP, the firewall rules created are as follow:
And when an IP is blocked in CSF.DENY, the IP rules created are:Chain num pkts bytes target prot opt in out source destination
DENYIN 50 0 0 DROP all -- !lo * 123.123.123.123 0.0.0.0/0
PREROUTING 68 0 0 REDIRECT tcp -- !lo * 123.123.123.123 0.0.0.0/0 multiport dports 80,2082,2095 redir ports 8888
PREROUTING 69 0 0 REDIRECT tcp -- !lo * 123.123.123.123 0.0.0.0/0 multiport dports 21 redir ports 8889
ip6tables:
Chain num pkts bytes target prot opt in out source destination
No matches found for 123.123.123.123 in ip6tables
Temporary Blocks: IP:123.123.123.123 Port: Dir:in TTL:50 (Manually added)
Why TEMP bans are only blocked IN and not OUT?Chain num pkts bytes target prot opt in out source destination
DENYIN 49 0 0 DROP all -- !lo * 123.123.123.123 0.0.0.0/0
DENYOUT 48 0 0 DROP all -- * !lo 0.0.0.0/0 123.123.123.123
PREROUTING 66 0 0 REDIRECT tcp -- !lo * 123.123.123.123 0.0.0.0/0 multiport dports 80,2082,2095 redir ports 8888
PREROUTING 67 0 0 REDIRECT tcp -- !lo * 123.123.123.123 0.0.0.0/0 multiport dports 21 redir ports 8889
ip6tables:
Chain num pkts bytes target prot opt in out source destination
No matches found for 123.123.123.123 in ip6tables
csf.deny: 123.123.123.123 # do not delete - Mon Mar 24 01:25:12 2014
...Done.