ConfigServer Community Forum

Do not check double of the added IP address (-p port).

csf -td 89.222.186.1 -p 80
DROP tcp opt -- in !lo out * 89.222.186.1 -> 0.0.0.0/0 tcp dpt:80
csf: IPSET adding [89.222.186.1] to set [MESSENGER]
csf: 89.222.186.1 blocked on port 80 for 3600 seconds inbound

csf -td 89.222.186.1 -p 80
DROP tcp opt -- in !lo out * 89.222.186.1 -> 0.0.0.0/0 tcp dpt:80
csf: IPSET adding [89.222.186.1] to set [MESSENGER]
csf: 89.222.186.1 blocked on port 80 for 3600 seconds inbound

====
do not specify a port:

csf -td 89.222.186.1
DROP all opt -- in !lo out * 89.222.186.1 -> 0.0.0.0/0
csf: IPSET adding [89.222.186.1] to set [MESSENGER]
csf: 89.222.186.1 blocked on port * for 3600 seconds inbound

csf -td 89.222.186.1 -p 80
csf: 89.222.186.1 is already temporarily blocked

Thank you for reporting this. We will have a fix for it in the next release of csf.

This has been fixed in csf v7.73:
http://blog.configserver.com/