Master Branch update inc/csftweaks.inc more accurate ipset support detection

update inc/csftweaks.inc more accurate ipset support detection

Continue reading...

---

Centmin Mod Github Master branch

Master branch is where most recent commits are made as at May 24, 2015.

• Branch: https://github.com/centminmod/centminmod
• Commit History: https://github.com/centminmod/centminmod/commits/master

 

For Linode ensure ipset and ipset-devel installed

Code:

yum list ipset ipset-devel -q

and if so just enable it in /etc/csf/csf.conf via

Code:

LF_IPSET = "1"

or sed command line edit and raise ip limits

Code:

sed -i 's/LF_IPSET = \"0\"/LF_IPSET = \"1\"/' /etc/csf/csf.conf
sed -i 's/DENY_IP_LIMIT = \"100\"/DENY_IP_LIMIT = \"3000\"/' /etc/csf/csf.conf
sed -i 's/DENY_TEMP_IP_LIMIT = \"100\"/DENY_TEMP_IP_LIMIT = \"3000\"/' /etc/csf/csf.conf

then restart CSF Firewall

Code:

csf -r

Linode is special case as unlike other providers who load the ipset module support into kernels, Linode compiles custom kernels with ipset support natively embedded into their kernels so normal checks for ipset support in kernel don't report Linode kernels support ipset but they do

 

indeed !