GLOBAL_DENY v blacklist

2 posts Page 1 of 1
Junior Member
Posts: 5
Joined: 16 Jul 2011, 17:26

Is there any difference / advantage / disadvantage to using GLOBAL_DENY rather than an entry in /etc/csf/csf.blocklists ?
Junior Member
Posts: 70
Joined: 22 Aug 2019, 21:43

Good question. I use both.

Blocklists are useful resources although often incomplete. Most blocklists are accessed via DNS so only file-based BLs can be added to CSF.

A Global list is arbitrary which means you can control it. I use a GLOBAL_DENY list to add troublesome IPs not caught by blocklists or known repeat offenders. Additionally, the Global list is an easy way to distribute these IPs to other servers I manage without the need to configure a cluster.

Those are a few notes. Others might have additional perspectives.
2 posts Page 1 of 1