Automatic Ban IP Ranges

Post Reply
hazhayder
Junior Member
Posts: 8
Joined: 23 Jan 2016, 08:25

Automatic Ban IP Ranges

Post by hazhayder »

Hello,
is there is any way to block ranges of that IP automatically by CSF that is being listed in csf.deny file ?
Sergio
Junior Member
Posts: 1715
Joined: 12 Dec 2006, 14:56

Re: Automatic Ban IP Ranges

Post by Sergio »

You should check "Temp to Perm/Netblock Settings" in CSF.CONFIG:

"Permanently block IPs by network class. The following enables this feature
to permanently block classes of IP address where individual IP addresses
within the same class LF_NETBLOCK_CLASS have already been blocked more than
LF_NETBLOCK_COUNT times in the last LF_NETBLOCK_INTERVAL seconds. Set
LF_NETBLOCK to "1" to enable this feature

This can be an affective way of blocking DDOS attacks launched from within
the same network class

Valid settings for LF_NETBLOCK_CLASS are "A", "B" and "C", care and
consideration is required when blocking network classes A or B

Set LF_NETBLOCK to "0" to disable this feature"
Post Reply