ConfigServer Community Forum

Thanks Ilia, nice addition to the forum.

Sergio

It is not wasted time, I called learning time

By the way, it seems that LFD -r doesn't exist, you should use:
/etc/init.d/lfd restart

Can you paste more lines of the errors that you want to block?

What is the log file where you are searching for these errors?

Where in your error line is the " \[ " ? The line that you are showing has: 1392714132.861 0 1.2.3.4 TCP_DENIED/407 3922 CONNECT google.com:443 username HIER_NONE/- text/html So, the regex don't need any "\[" nor "\]" that doesn't exist. The regex should be something li...

My purpose is to only allow 1 country, and drop all others to FTP access. Well, in that case you can do to grant access to port 21 to only one country, use: CC_ALLOW_PORTS = US CC_ALLOW_TCP = 21 CC_ALLOW_UDP = 21 "An example would be to list port 21 here and remove it from TCP_IN/UDP_IN then o...

Read:

http://blog.configserver.com/?p=2113

Wilhelm,
instead of blocking all that countries, why don't you remove port 21 from TCP/UPD IN/OUT and creates the rules needed for the only IP that will be accessing your FTP port?

Just my 2 cents.

did you restarted sshd for the changes to take effect?

Hi soupn, yes, we have created a system that does the following: 1. Check CSF for any of our rules are triggered. 2. If the IP trigger any of our rules the IP is blocked in CSF deny. 3. A cron is executed every few minutes and checks the IPs that has been blocked. 4. If the IP is from countries that...