ConfigServer Community Forum

I too have noticed this and have made some steps towards making this more performant - it may well be related to your crashing bug as well - it is to do with some of the datafiles in use by CSF/LFD and how they are locked upon a ban/unban etc I have made some adjustments to use sqlite instead of th...

Forgot to update my solution here.
Above problem can be easily solved by adding NAT rule, using csfpre.sh, for example
iptables -t nat -I PREROUTING -s 192.168.1.100 -j ACCEPT

Hello, When messenger service is active, and specific subnet is blocked (in csf.deny), but one IP address of this subnet is whitelisted (in csf.allow), the user (whitelisted IP) is still being redirected to messenger service. I think it because of IPSET chains order, messenger chain before allow cha...

sounds like a classic scenario for fail2ban usage.

You can allow a whole /24 subnet
for example if your IP address is between 192.168.1.1 to 192.168.1.255 you can allow 192.168.1.1/24

Another method is to register your pc / router with dynamic dns service (noip.com for example) and add your domain to /etc/csf/csf.dyndns