ConfigServer Community Forum

When you add or uncomment entries in csf.blocklists, you can look in the directory /var/lib/csf for the actual downloaded files that are included in your deny blocklists. I highly recommend that you use IPSET if your server will allow it. IPSET is a much faster database for lookups by IPTABLES. Set ...

It looks like my CSF configuration is on a trajectory to permanently block the entire internet. All of these blocks have been triggered because of LF_DISTATTACK. All of the blocks so far are from SMTPAUTH failures. In the past 4.5 days CSF/LFD has blocked 836 LF_DISTATTACKs and entered them into csf...