Security - Server

[Frank Broughton]

Question, "thisisit" has a BFD rules for Jag servers,

Should I need this, since I have CSF installed and running?

NO - you cannot run both!

[Frank Broughton]

Be careful you do not block yourself. If you enter the wrong password so many times, it will block YOUR IP.... I have had that happen many times to users on my servers.

[gohighvoltage]

Thanks Frank, Appreciate the advice and help. So far this firewall is awesome. Anyone with a server should definitely install it.

[gohighvoltage]

I noticed since the install of CSF, that the numiptent use went a lot higher, not on the hard limit, but close. Is this a problem, or is there any way to limit the Number of IP packet filtering entries without reducing the protection of the firewall?

[gohighvoltage]

Installing CSF+LFD was the best thing I ever did!!! I am up to 150 IP addresses permanently blocked now for port scanning and attempts to brute force log in!!! Crazy!!!

[Deyson]

Is CSF+LFD for VPS hosting?

I am using Jaguar’s Web Hosting Plan.

[JPC-Bilal]

Hi Deyson,

CSF-LFD is installed on all of our shared, sdx and reseller servers too. Thank you.

[Jamsori]

I noticed since the install of CSF, that the numiptent use went a lot higher, not on the hard limit, but close. Is this a problem, or is there any way to limit the Number of IP packet filtering entries without reducing the protection of the firewall?

That means CSF+LFD is doing its job, really. Sure you're aware of it now though since this is an older post.

Installing CSF+LFD was the best thing I ever did!!! I am up to 150 IP addresses permanently blocked now for port scanning and attempts to brute force log in!!! Crazy!!!

Haha, it's a pretty awesome script.

[Big Tom]

A very cool feature of csf is blocking whole countries. There is a limit in regards to how many rules iptables can handle before slowing down, so when I had China, Russia and Moldova blocked, it slowed the whole system down quite a bit (and prior to that the Jag admins had to chane a parameter on the VM outside of the operating system).
The entry to block complete countries in /etc/csf/csf.conf is CC_DENY - The line CC_DENY = "CN,RU,MD" would block China, Russia, Moldovia :-)

[gohighvoltage]

A very cool feature of csf is blocking whole countries. There is a limit in regards to how many rules iptables can handle before slowing down, so when I had China, Russia and Moldova blocked, it slowed the whole system down quite a bit (and prior to that the Jag admins had to chane a parameter on the VM outside of the operating system).
The entry to block complete countries in /etc/csf/csf.conf is CC_DENY - The line CC_DENY = "CN,RU,MD" would block China, Russia, Moldovia :-)

Yeah, blocking Russia, China, and some other countries isn't a bad idea. Most of my attacks are from a few countries.