Learn about Centmin Mod LEMP Stack today
Become a Member

CSF Anybody here using csf.blocklists block list?

Discussion in 'Other Centmin Mod Installed software' started by rdan, Mar 30, 2018.

  1. rdan

    rdan Well-Known Member

    5,452
    1,418
    113
    May 25, 2014
    Ratings:
    +2,212
    Local Time:
    1:40 AM
    Mainline
    10.2
    I just enable this now, I hope less false positive.
    Code:
    STOPFORUMSPAM|43200|0|https://stopforumspam.com/downloads/listed_ip_1.zip
    More download options: Stop Forum Spam

     
  2. rdan

    rdan Well-Known Member

    5,452
    1,418
    113
    May 25, 2014
    Ratings:
    +2,212
    Local Time:
    1:40 AM
    Mainline
    10.2
  3. eva2000

    eva2000 Administrator Staff Member

    59,718
    12,541
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,185
    Local Time:
    3:40 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    FYI, Centmin Mod has csf-advancetweaks.sh for extending CSF Firewall blocklists too Centmin Mod 123.09beta01 extended CSF Firewall Tweaks and Beta Branch - revise inc/csftweaks.inc. Only enable blocklists on non-openvz servers which have Kernel IPSET support (Centmin Mod auto configures CSF Firewall IPSET support if Kernel IPSET support is detected in non-openvz servers).

    AFAIK, /var/log/lfd.log and /etc/csf/csf.deny
     
  4. rdan

    rdan Well-Known Member

    5,452
    1,418
    113
    May 25, 2014
    Ratings:
    +2,212
    Local Time:
    1:40 AM
    Mainline
    10.2
    I just tried creating my own blocklist with my vpn IP.
    It's blocked but isn't logged.
     
  5. eva2000

    eva2000 Administrator Staff Member

    59,718
    12,541
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,185
    Local Time:
    3:40 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    check via
    Code (Text):
    csf -g yourblocked_ipaddress
    
     
  6. rdan

    rdan Well-Known Member

    5,452
    1,418
    113
    May 25, 2014
    Ratings:
    +2,212
    Local Time:
    1:40 AM
    Mainline
    10.2
     
  7. eva2000

    eva2000 Administrator Staff Member

    59,718
    12,541
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,185
    Local Time:
    3:40 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    That looks correct means IP is blocked. Block would also show up in /var/log/messages