Search found 8 matches

by brianoz
19 Apr 2018, 07:46
Forum: Suggestions (csf)
Topic: csfpost.sh doesn't use shebang
Replies: 1
Views: 3659

Re: csfpost.sh doesn't use shebang

#!/bin/bash if [ ! "$BASH_VERSION" ] ; then echo "Please do not use sh to run this script ($0)" fi I'd suspect this is because /bin/sh is actually bash (or bash family) on one but not the other - check out /bin/sh and /usr/sbin/sh. A simple solution is to exec bash if you really...
by brianoz
07 Jun 2017, 03:36
Forum: General Discussion (csf)
Topic: CSF help for WordPress /wp-login.php and /xmlrpc.php DDOS
Replies: 1
Views: 3847

CSF help for WordPress /wp-login.php and /xmlrpc.php DDOS

Does anyone have a working set of rules they use with CSF to help reduce impact from repeated login attempts on WordPress? These attempts take place with /xmlrpc.php (multiple attempts in one post) and /wp-login.php (single attempt). Often one IP will try many, many times (eg yesterday, 3000 in 2 da...
by brianoz
15 Sep 2014, 04:42
Forum: Suggestions (csf)
Topic: Feature Request: block country by ipset nethash rule table
Replies: 15
Views: 12800

Re: Feature Request: block country by ipset nethash rule tab

ipset allows large sets of IPs to be blocked without performance degrading. This sounds absolutely fantastic and it would make a lot of things like blocking countries and using all the blocklists possible. just wanting to add my vote. This would really set CSF apart as I don't think the others do th...
by brianoz
04 Jun 2007, 13:43
Forum: Suggestions (csf)
Topic: remove entries from csf.deny from command line
Replies: 6
Views: 12044

Nine times out of 10 if I want to remove an IP from the deny list I want to make sure it doesn't get added again, ie whitelist it.

Granted, it's not quite the same as just removing; but then your post implied that the -a option didn't remove the IP from the deny list and it does!
by brianoz
04 Jun 2007, 13:12
Forum: Suggestions (csf)
Topic: remove entries from csf.deny from command line
Replies: 6
Views: 12044

The command csf -a IP adds an IP to csf.allow which is not the same as removing an IP from csf.deny. read the instructions again. I too agree with Zeth that such an option would be really handy sometimes. Such an option would be useful, which is why Chirpy actually did add that functionality to csf...
by brianoz
03 Jun 2007, 02:40
Forum: Suggestions (csf)
Topic: Temporary Blocks
Replies: 4
Views: 5798

Agree with this, would be handy to clear down the FTP and SMTP lists regularly. SSH should stay blocked, mod_security would work either way.
by brianoz
03 Jun 2007, 02:32
Forum: Suggestions (csf)
Topic: remove entries from csf.deny from command line
Replies: 6
Views: 12044

CSF already has this!

csf -a IP