ConfigServer Community Forum

I'm seeing this every time I restart lfd: ● lfd.service - ConfigServer Firewall & Security - lfd Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled) Active: active (running) since Sat 2020-03-28 09:47:35 EDT; 3ms ago Process: 21413 ExecStart=/usr/sbin/lfd (code...

Never mind, I'm an idiot. The rule works perfectly... the workstation that I testing from was whitelisted in csf.allow. Doh!

My server has 4 IP addresses, one of which has come under the "Great Firewall of China" DDoS attack. For the affected IP address (let's say it's 1.2.3.4), I want to block all port 80 traffic, so I created the following entry in csf.deny: tcp|in|d=80|d=1.2.3.4 This works but not how I want....