Welcome to Centmin Mod Community
Become a Member

Centmin Mod 123.09beta01 extended CSF Firewall Tweaks

Discussion in 'Centmin Mod News' started by eva2000, May 22, 2017.

Thread Status:
Not open for further replies.
  1. eva2000

    eva2000 Administrator Staff Member

    36,442
    7,998
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,320
    Local Time:
    4:39 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Updated Centmin Mod 123.09beta01+ and higher branches with extended CSF Firewall tweaks outlined below
    • More dynamic formula for non-openvz system based DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT settings based on system resources available.
    • Add tools/csf-advancetweaks.sh which can be manually run on non-openvz systems which have linux kernel that supports IPSET to update existing Centmin Mod LEMP system's CSF Firewall settings for DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT with these committed changes. The script also extends /etc/csf/csf.blocklists for blocklist.de additional block ip lists which are narrower than CSF default DBEALL chain provided. These additional blocklist.de chains are taken from http://www.blocklist.de/en/export.html. Specific details outlined at https://community.centminmod.com/posts/50058/

     
    • Like Like x 1
..
Thread Status:
Not open for further replies.