ConfigServer Community Forum

Hi, I was just wondering if when I ban an IP, does it just get banned from being able to log into our WHM or does it ban them globally from the server, including all domains and WHM.

Regards, Rob.

I believe banning an IP, bans the whole IP from everything.
Even down to being able to connect to a web page on your server or any email server on that IP being able to send email to your server.

Are you trying to achieve something ?

We often find people 'attacking' our websites trying various logins, they then give up and instantly move to the next domain.

We were banning them on each website as they went through but was curious to whether we could just ban them using this plugin on our server and stopping them attacking each domain.

Cheers.

Rob.

Do you have this plugin already ??

Yes, it installed and running. We have been banning IPs on our domains using a different plugin. This way makes it much simpler.

I have the protection_high profile configured, with a little fine tuning on failed logins.
3 failed smtp's for a start.
I also have a 1500 limit on my denied IP list which is giving me about a month before they start to drop off the end.

This plugin is highly configurable.

rob, is this your own server with your own domains, and only you need access ?
or do you have customer domains needing cpanel logins etc

Yes this is our server and domains, some clients need access to their websites for adding products.

I was going to suggest some clever whitelisting and blacklisting in WHM, but if you have clients needing access then this would be too messy to administer.

When you have CSF configured with a profile and taken out of test mode, search for anything related to LFD in the config, and fine tune accordingly, however, It works well straight out of the box to be honest..