Page 1 of 1

Where to look for blocked IPs?

Posted: 10 Nov 2016, 20:14
by maknet
I have users that are blocked from the system.

When I search csf.deny the IP address isn't in there.

But when I add them to csf.allow, they are able to get e-mail OK.

So my question is, is there another place to look for IP addresses or is there another method that IPs get blacklisted that isn't through csf.deny?

Thanks,


Lawrence

Re: Where to look for blocked IPs?

Posted: 10 Nov 2016, 22:19
by sawbuck
Could be temporary blocks - /var/lib/csf/csf.tempban

If you're on a cPanel/WHM server the CSF interface has a "Search for IP" function that might be more useful.

Re: Where to look for blocked IPs?

Posted: 11 Nov 2016, 00:33
by maknet
It was "found" using the CSF search but i was wondering why the offending IP was placed there. Ie.. so i could tell my client "scan for viruses" or "your apple mobile is using port 587 to try to send and the server thinks you're port-scanning".

So normally i look at the csf.deny to see the reason.