feature idea: restrict port access by ASN not just CC

[aww+]

I was thinking how the limit port access by CC was useful but so large it might be more dangerous than it needs to be (on systems where port knocking just doesn't seem to work)

But maxmind also has an ASN database (GeoLite ASN) that is updated monthly, so should be accurate enough

So could it be possible to duplicate all the CC_ALLOW, etc. settings and have ASN_ALLOW ?

[ForumAdmin]

This was implemented in csf v8.12

"Additional Feature: Added support for listing ASNs in all Country Code (CC_*) options"

[aww+]

Oh wow I completely missed that. Awesome, thanks.

The downside of simply copying a csf.conf from one install to another.

[aww+]

This was implemented in csf v8.12

"Additional Feature: Added support for listing ASNs in all Country Code (CC_*) options"

actually, could you give an example of how this should be formatted?

is it simply

CC_ALLOW = "AS1234"

???

[ForumAdmin]

That's exactly it.