Block a hostname forever

[Silent Ninja]

One of our customers is having issues with a remote MX, so my plan was to block it on CSF, but every once in a while it gets cleared out due to the IP limit of the deny table.

How can I block that IP forever?

Also, is there a way to block domains using dyndns instead of just allowing them thru?

[Achtron]

You can add "do not delete" within the comment field in the csf.deny file if you don't want to rotate the IP.

Like this:

Code: Select all

11.22.33.44 # do not delete

Or when you block the IP using cli :

Code: Select all

csf -d 11.22.33.44 do not delete