Where to look for blocked IPs?

[maknet]

I have users that are blocked from the system.

When I search csf.deny the IP address isn't in there.

But when I add them to csf.allow, they are able to get e-mail OK.

So my question is, is there another place to look for IP addresses or is there another method that IPs get blacklisted that isn't through csf.deny?

Thanks,


Lawrence

[sawbuck]

Could be temporary blocks - /var/lib/csf/csf.tempban

If you're on a cPanel/WHM server the CSF interface has a "Search for IP" function that might be more useful.

[maknet]

It was "found" using the CSF search but i was wondering why the offending IP was placed there. Ie.. so i could tell my client "scan for viruses" or "your apple mobile is using port 587 to try to send and the server thinks you're port-scanning".

So normally i look at the csf.deny to see the reason.