Beta Branch update censys block IP range list in 123.09beta01

update censys block IP range list in 123.09beta01

For fresh installs only. For existing installs, you can manually add the IP ranges to CSF Firewall deny block list via commands

Code (Text):

csf -d 198.108.66.0/23 censys
csf -d 198.108.204.216/29 censys

Continue reading...

---

123.09beta01 branch

• Branch: centminmod/centminmod
• Commit History: centminmod/centminmod

 

Yeah unfortunately CSF Firewall needs to set limits of number of IPs you can block permanently or temporarily for memory and system resource usage reasons. So older entries do get removed eventually. If you have the resources you can set the limits higher in /etc/csf/csf.conf and restart CSF Firewall = csf -ra command

Centmin Mod also conditionally sets limits based on detected resource usage too - but done conservatively

Code (Text):

egrep '^DENY_IP_LIMIT|^DENY_TEMP_IP_LIMIT' /etc/csf/csf.conf

example checking limits on my dedicated server I set them higher

Code (Text):

egrep '^DENY_IP_LIMIT|^DENY_TEMP_IP_LIMIT' /etc/csf/csf.conf
DENY_IP_LIMIT = "60000"
DENY_TEMP_IP_LIMIT = "80000"

Thanks for reminder that I should have another look at this routine

 

Permanent blocks still end up in /etc/csf/csf.deny and need purging once reaching the preset limits in above variables. I'm going to write a tool to run as a cronjob which can check how many IPs in /etc/csf/csf.deny and when it gets close to preset limits in above variables, re-run a script to re-apply these CSF Firewall IP bans again - so as to keep them in CSF Firewall deny.

 

Fixed in 130.00beta01 updates https://community.centminmod.com/th...01-release-discussion.22676/page-2#post-97623