Want more timely Centmin Mod News Updates?
Become a Member

Master Branch update inc/csftweaks.inc more accurate ipset support detection

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jun 19, 2015.

  1. eva2000

    eva2000 Administrator Staff Member

    36,845
    8,064
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,422
    Local Time:
    5:50 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
  2. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    3:50 AM
    Mainline
    10.2
    How to apply on my Linode server? :/
     
  3. eva2000

    eva2000 Administrator Staff Member

    36,845
    8,064
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,422
    Local Time:
    5:50 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    For Linode ensure ipset and ipset-devel installed
    Code:
    yum list ipset ipset-devel -q
    and if so just enable it in /etc/csf/csf.conf via
    Code:
    LF_IPSET = "1"
    or sed command line edit and raise ip limits
    Code:
    sed -i 's/LF_IPSET = \"0\"/LF_IPSET = \"1\"/' /etc/csf/csf.conf
    sed -i 's/DENY_IP_LIMIT = \"100\"/DENY_IP_LIMIT = \"3000\"/' /etc/csf/csf.conf
    sed -i 's/DENY_TEMP_IP_LIMIT = \"100\"/DENY_TEMP_IP_LIMIT = \"3000\"/' /etc/csf/csf.conf
    
    then restart CSF Firewall
    Code:
    csf -r
    Linode is special case as unlike other providers who load the ipset module support into kernels, Linode compiles custom kernels with ipset support natively embedded into their kernels so normal checks for ipset support in kernel don't report Linode kernels support ipset but they do :)
     
    Last edited: Jun 19, 2015
    • Like Like x 1
  4. rdan

    rdan Premium Member Premium Member

    4,365
    1,053
    113
    May 25, 2014
    Ratings:
    +1,522
    Local Time:
    3:50 AM
    Mainline
    10.2
    Should be:
    LF_IPSET = "1"

    Thanks a lot Eva :)
     
    • Like Like x 1
  5. eva2000

    eva2000 Administrator Staff Member

    36,845
    8,064
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,422
    Local Time:
    5:50 AM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    indeed !
     
..