Cluster config partly working in CSF v10.02

Post Reply
Nick57
Junior Member
Posts: 20
Joined: 28 Dec 2006, 01:02

Cluster config partly working in CSF v10.02

Post by Nick57 »

Hi all,
I wondering if I have something forgotten in my configuration for my cluster set-up?
Cluster_Sendto has all 4 IPs, Cluster Recvfrom, all 4 IPs, Cluster block = on, Cluster config = off
Same config on all 4 servers.

4 servers are in the cluster, it works partly fine, but it is not blocking IPs from LFD. and Network Classes.

- cping command PONGS! happily back,
- lfd cluser members are sending blocks done with *Port Scan*, so that works fine.

-] What doesn't work is the Network Class C block, that is not synced between the 4 servers.
-] Manual blocking this IP range in the csf - ConfigServer lfd Cluster, Cluster deny shows it blocks it but looking in any of these 4 servers nothing really happened, see messages below, anyone any idea if something in my configuration is missing?

*** I tried on the command prompt csf -cd 95.213.177.0/24
Sent request to xxxx, replied: [Received]
But nothing was received in the cluster, and not even added on the server in which I run the command, weird.

Thank you
-----------------------------------------
Time: Fri Mar 3 04:40:27 2017 +0100
Block: 95.213.177.0/24
Hits: 3

IP addresses that triggered the block
Fri Mar 3 00:25:55 2017 95.213.177.125
Fri Mar 3 04:40:26 2017 95.213.177.125
Fri Mar 3 04:40:26 2017 95.213.177.124
----------------------------------------

Cluster Deny 95.213.177.0/24...

Sent request to xxxx, replied: [Received]
Sent request to xxxx, replied: [Received]
Sent request to xxxx, replied: [Received]
Sent request to xxxx, replied: [Received]

...Done.
--------------------------------------------
Cluster PING...

Sent request to xxxx, replied: [PONG!]
Sent request to xxxx, replied: [PONG!]
Sent request to xxxx, replied: [PONG!]
Sent request to xxxx, replied: [PONG!]

...Done.
ForumAdmin
Moderator
Posts: 1523
Joined: 01 Oct 2008, 09:24

Re: Cluster config partly working in CSF v10.02

Post by ForumAdmin »

Clustering doesn't currently allow CIDR blocking. I'm not sure why it was implemented that way, but we'll look at it again soon.
Nick57
Junior Member
Posts: 20
Joined: 28 Dec 2006, 01:02

Re: Cluster config partly working in CSF v10.02

Post by Nick57 »

Thank you for confirmation,
Nick57
Junior Member
Posts: 20
Joined: 28 Dec 2006, 01:02

Re: Cluster config partly working in CSF v10.02

Post by Nick57 »

Thanks very much for fixing it that fast!
Post Reply