CC_ALLOW_FILTER = US not working still allows other countries

Post Reply
spirog
Junior Member
Posts: 1
Joined: 05 May 2022, 08:16

CC_ALLOW_FILTER = US not working still allows other countries

Post by spirog »

CC_ALLOW_FILTER not working.

# An alternative to CC_ALLOW is to only allow access from the following
# countries but still filter based on the port and packets rules. All other
# connections are dropped


OS: AlmaLinux 8.5 cPanel 102.0.14
also using it with Proxmox Virtual Environment 7.2.
Debian 11.3 "Bullseye" but using a newer Linux kernel 5.15.30,
QEMU 6.2, LXC 4

Both are using- CSF Version: csf: v14.16
and I have seen the issue with both.

Settings in csf.conf

FASTSTART = "1"
LF_IPSET = "1"
CC_ALLOW_FILTER = "US"
also tried
FASTSTART = "0"
LF_IPSET = "1"
CC_ALLOW_FILTER = "US"

Maxmind license activated as well

Traffic from other countries is still logging entries trying to access ssh to server and ports.

I needed to also add in CC_DENY = SG,CN,RU,IN,KP,KR,JP to get them to stop

I saw this was an issue and was fixed last Year, but maybe because of another post of Maxmind getting some updates in next version of CSF for a bug with not correct ASN for some countries or IP's/ might this be the issue as well?

Thanks for your time in checking on this as well.
Much appreciated

Kind Regards,
Spiro
Post Reply