Get the most out of your Centmin Mod LEMP stack
Become a Member

CSF Anybody here using csf.blocklists block list?

Discussion in 'Other Centmin Mod Installed software' started by rdan, Mar 30, 2018.

  1. rdan

    rdan Premium Member Premium Member

    4,229
    1,029
    113
    May 25, 2014
    Ratings:
    +1,470
    Local Time:
    7:12 AM
    Mainline
    10.2
    I just enable this now, I hope less false positive.
    Code:
    STOPFORUMSPAM|43200|0|https://stopforumspam.com/downloads/listed_ip_1.zip
    More download options: Stop Forum Spam
     
  2. rdan

    rdan Premium Member Premium Member

    4,229
    1,029
    113
    May 25, 2014
    Ratings:
    +1,470
    Local Time:
    7:12 AM
    Mainline
    10.2
  3. eva2000

    eva2000 Administrator Staff Member

    35,107
    7,751
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,953
    Local Time:
    9:12 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    FYI, Centmin Mod has csf-advancetweaks.sh for extending CSF Firewall blocklists too Centmin Mod 123.09beta01 extended CSF Firewall Tweaks and Beta Branch - revise inc/csftweaks.inc. Only enable blocklists on non-openvz servers which have Kernel IPSET support (Centmin Mod auto configures CSF Firewall IPSET support if Kernel IPSET support is detected in non-openvz servers).

    AFAIK, /var/log/lfd.log and /etc/csf/csf.deny
     
  4. rdan

    rdan Premium Member Premium Member

    4,229
    1,029
    113
    May 25, 2014
    Ratings:
    +1,470
    Local Time:
    7:12 AM
    Mainline
    10.2
    I just tried creating my own blocklist with my vpn IP.
    It's blocked but isn't logged.
     
  5. eva2000

    eva2000 Administrator Staff Member

    35,107
    7,751
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,953
    Local Time:
    9:12 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    check via
    Code (Text):
    csf -g yourblocked_ipaddress
    
     
  6. rdan

    rdan Premium Member Premium Member

    4,229
    1,029
    113
    May 25, 2014
    Ratings:
    +1,470
    Local Time:
    7:12 AM
    Mainline
    10.2
     
  7. eva2000

    eva2000 Administrator Staff Member

    35,107
    7,751
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,953
    Local Time:
    9:12 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    That looks correct means IP is blocked. Block would also show up in /var/log/messages
     
..