Search found 13 matches

by rolinger
23 Jul 2023, 14:57
Forum: General Discussion (csf)
Topic: How to block all IPs from specific domain?
Replies: 5
Views: 1248

Re: How to block all IPs from specific domain?

@Sergio - here is another IP from the same domain that has been blocked. There are hundreds of similar lines, so I copied all the ones that were different from each other. On another note, I don't understand why this is so challenging to do on CSF. On other FWs, you can simply put in a rule that ess...
by rolinger
18 Jul 2023, 15:25
Forum: General Discussion (csf)
Topic: How to block all IPs from specific domain?
Replies: 5
Views: 1248

Re: How to block all IPs from specific domain?

@Sergio Hi, thanks for assisting. Here is an example of the vulnerability scan logs - I have dozens and dozens of the same log entries all from different IPs; but ALL from the same domain. IE: amazoneaws.com Time: Tue Jul 18 07:54:53 2023 -0400 IP: 34.223.64.89 (US/United States/ec2-34-223-64-89.us-...
by rolinger
16 Jul 2023, 14:52
Forum: General Discussion (csf)
Topic: How to block all IPs from specific domain?
Replies: 5
Views: 1248

How to block all IPs from specific domain?

One would think this would be easy but apparently its not...or its not possible. I need to block ALL IPs from a specific domain, the problem is the domain has hundreds of IP CIDRs and its virtually impossible to block them all from standard IP deny lists - as well, about every 2 to 3 months, they se...
by rolinger
07 Feb 2023, 21:11
Forum: General Discussion (csf)
Topic: Permitted Dynamic DNS hosts not permitted to SSH to FW
Replies: 0
Views: 1149

Permitted Dynamic DNS hosts not permitted to SSH to FW

In the `lfd Dynamic DNS` config section I have three subdomains listed: myHost1.ddns.net myHost2.ddns.net myHost3.ddns.net I am using DUC IP on my home computer and have verified that my public DNS name is `myHost1.ddns.net` - yet my computer is not able to SSH to my server. The only way I can SSH i...
by rolinger
10 Oct 2022, 13:48
Forum: General Discussion (csf)
Topic: CSF suddenly blocking previously allowed outbound traffic
Replies: 6
Views: 1065

Re: CSF suddenly blocking previously allowed outbound traffic

Well...i removed and reinstalled CSF and everything started working again. No reason, no rhyme - no evidence (configs) or logs even suggesting it was blocking traffic. I don't know what to make of it, but at least for now all is working correctly again.
by rolinger
05 Oct 2022, 16:58
Forum: General Discussion (csf)
Topic: CSF suddenly blocking previously allowed outbound traffic
Replies: 6
Views: 1065

Re: CSF suddenly blocking previously allowed outbound traffic

@opusuno - I am blocking India too...always have been. I will be doing just that, a fresh install of CSF and start over - praying that helps.
by rolinger
04 Oct 2022, 14:55
Forum: General Discussion (csf)
Topic: HELP - CSF blocking all inbound email
Replies: 1
Views: 545

HELP - CSF blocking all inbound email

This started recently and I can't figure out what is causing it. Hotmail, outlook, gmail, yahoo, client domains, configserver.com - with CSF enabled no mail is being received, but it appears all outbound email is working fine. If I disabled CSF all the mail starts coming in again. I made no changes ...
by rolinger
04 Oct 2022, 14:16
Forum: General Discussion (csf)
Topic: CSF suddenly blocking previously allowed outbound traffic
Replies: 6
Views: 1065

Re: CSF suddenly blocking previously allowed outbound traffic

@opusuno - I have not resolved it. What I ended up having to do was white list about a dozen IPs for cPanel automation/update/download scripts to get things to work again. But my issues goes just beyond this out bound traffic. I have also found out that CSF is blocking pretty much ALL inbound email....
by rolinger
01 Oct 2022, 12:46
Forum: General Discussion (csf)
Topic: CSF blocking various types of traffic after server host name change
Replies: 1
Views: 583

Re: CSF blocking various types of traffic after server host name change

I couldn't figure out how to close this thread. I don't believe the above is the issue; though the timing of it just made everything very suspect because it was the ONLY known change when my CSF started doing random bizarre things. Please refer to this thread now: https://forum.configserver.com/view...
by rolinger
01 Oct 2022, 12:44
Forum: General Discussion (csf)
Topic: CSF suddenly blocking previously allowed outbound traffic
Replies: 6
Views: 1065

CSF suddenly blocking previously allowed outbound traffic

I can't explain why this is happening, but in recent weeks CSF has begun blocking outbound traffic to specific update servers for cPanel services. At first I thought it was all related to a forced server host name change by GoDaddy, but on further review it seems to be something else. The timing of ...