Learn about Centmin Mod LEMP Stack today
Register Now

Centmin Mod 123.09beta01 extended CSF Firewall Tweaks

Discussion in 'Centmin Mod News' started by eva2000, May 22, 2017.

Thread Status:
Not open for further replies.
  1. eva2000

    eva2000 Administrator Staff Member

    May 24, 2014
    Brisbane, Australia
    Local Time:
    7:44 PM
    Nginx 1.25.x
    MariaDB 10.x
    Updated Centmin Mod 123.09beta01+ and higher branches with extended CSF Firewall tweaks outlined below
    • More dynamic formula for non-openvz system based DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT settings based on system resources available.
    • Add tools/csf-advancetweaks.sh which can be manually run on non-openvz systems which have linux kernel that supports IPSET to update existing Centmin Mod LEMP system's CSF Firewall settings for DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT with these committed changes. The script also extends /etc/csf/csf.blocklists for blocklist.de additional block ip lists which are narrower than CSF default DBEALL chain provided. These additional blocklist.de chains are taken from http://www.blocklist.de/en/export.html. Specific details outlined at https://community.centminmod.com/posts/50058/

Thread Status:
Not open for further replies.