ConfigServer Community Forum

Hello,

I've been looking for a way to allow important ports only to a few countries, and I found this topic:

viewtopic.php?f=6&t=7340#p21395

I followed the suggestions and configured CSF this way:

CC_ALLOW_PORTS = "GB,US,AU"

CC_ALLOW_PORTS_TCP = "20,21,2077,2078,2082,2083,2086,2087,2095,2096"
CC_ALLOW_PORTS_UDP = "20,21"

After restarting CSF, is not possible to access the ports from any of those countries. Actually, is not possible to access the ports from any country in the world. I ran some tests with friends over Skype and also used Pingdom Test tool. Only whitelisted IPs in csf.allow can access the ports.

CC_LOOKUPS is in 1, and the ports are not listed in TCP_IN neither in UDP_IN.

Any help with this would be appreciated.

Thanks guys!

Remove CC_DENY and CC_ALLOW rule completely. Restart CSF.
Then put new rule;

CC_ALLOW_FILTER = "US";

Restart CSF and reboot server to cut-off current existing connections.

This new rule will allow only those country which are listed in it; so no need to use 2 rules.

Please make sure that you have SAFECHAINUPDATE enable and wait for around 2-3 hours for new rule population.

Hello,

Thanks for you answer.

I'm not using CC_DENY and neither CC_ALLOW, and CC_ALLOW_FILTER doesn't look like what I need.

I just need to know why the configuration suggested in the other thread is not working as expected. Any ideas?

Thanks.-

Check that CC_LOOKUPS is enabled.