Page 1 of 1

CSF completely allow for certain ports event if IP was blocked for some other activity

Posted: 03 Sep 2016, 10:48
by Ilia
Hi,

Could you please help me to understand how (and if it's possible) to make CSF always allow connection to certain ports, like 80 for instance, no matter what. For example, in case Port Scan took place and CSF needs to block this IP/range of IPs, is there a way to make sure that blocked IP will still be able to use port 80?

Regards,
Ilia

Re: CSF completely allow for certain ports event if IP was blocked for some other activity

Posted: 20 Sep 2016, 13:23
by Ilia
I know you could do in `csf.allow`

Code: Select all

tcp|in|d=80|s=1.2.3.4
But how to do it for all IPs? How do I make sure that no matter what HTTPd service will always be accessible?

Re: CSF completely allow for certain ports event if IP was blocked for some other activity

Posted: 22 Sep 2016, 12:00
by Ilia
Alright, what if I do this, will it work:

Code: Select all

tcp|in|d=80|s=0.0.0.0/0
Is CSF meant to do it?

What if I added it to `csf.ignore`?