Temp to perm ban works until you remove the IP
Posted: 23 Mar 2016, 23:16
This bug is back in version 8.16. The current problem is that if you have a DENY_IP_LIMIT set when an IP address is pushed out of the list it is not being removed from /var/csf/csf/tempip. Since the record has the PERM flag set the bad IP address will never be banned again. Here's the code from CSF that removed the IP address from /etc/csf/csf.deny:
That's it. It never touches /var/lib/csf/csf.tempip. And that important message is lost since LFD doesn't capture it and log it.
Code: Select all
print "csf: DENY_IP_LIMIT ($config{DENY_IP_LIMIT}), the following IP's were removed from /etc/csf/csf.deny:\n";
for (my $x = 0; $x < ($ipcount - $config{DENY_IP_LIMIT})+1;$x++) {
print "$denyips[$x]\n";
my ($kip,undef) = split (/\s/,$denyips[$x],2);
&linefilter($kip, "deny", "", 1);
}