Discover Centmin Mod today
Register Now

Centmin Mod 123.09beta01 extended CSF Firewall Tweaks

Discussion in 'Centmin Mod News' started by eva2000, May 22, 2017.

Thread Status:
Not open for further replies.
  1. eva2000

    eva2000 Administrator Staff Member

    45,733
    10,382
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,115
    Local Time:
    3:59 AM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Updated Centmin Mod 123.09beta01+ and higher branches with extended CSF Firewall tweaks outlined below
    • More dynamic formula for non-openvz system based DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT settings based on system resources available.
    • Add tools/csf-advancetweaks.sh which can be manually run on non-openvz systems which have linux kernel that supports IPSET to update existing Centmin Mod LEMP system's CSF Firewall settings for DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT with these committed changes. The script also extends /etc/csf/csf.blocklists for blocklist.de additional block ip lists which are narrower than CSF default DBEALL chain provided. These additional blocklist.de chains are taken from http://www.blocklist.de/en/export.html. Specific details outlined at https://community.centminmod.com/posts/50058/

     
Thread Status:
Not open for further replies.