Page 1 of 1

Automatic Ban IP Ranges

Posted: 27 Jul 2016, 06:22
by hazhayder
Hello,
is there is any way to block ranges of that IP automatically by CSF that is being listed in csf.deny file ?

Re: Automatic Ban IP Ranges

Posted: 28 Jul 2016, 00:40
by Sergio
You should check "Temp to Perm/Netblock Settings" in CSF.CONFIG:

"Permanently block IPs by network class. The following enables this feature
to permanently block classes of IP address where individual IP addresses
within the same class LF_NETBLOCK_CLASS have already been blocked more than
LF_NETBLOCK_COUNT times in the last LF_NETBLOCK_INTERVAL seconds. Set
LF_NETBLOCK to "1" to enable this feature

This can be an affective way of blocking DDOS attacks launched from within
the same network class

Valid settings for LF_NETBLOCK_CLASS are "A", "B" and "C", care and
consideration is required when blocking network classes A or B

Set LF_NETBLOCK to "0" to disable this feature"