DENY_IP_LIMIT

Post Reply
manuelfranco
Junior Member
Posts: 5
Joined: 15 Jul 2012, 19:53

DENY_IP_LIMIT

Post by manuelfranco »

Excuseme

Do you know what happens if put DENY_IP_LIMIT = "0" ?

I need more 1000 ips limit, if i write DENY_IP_LIMIT = "0" csf.deny work with 0 or limit max is 1000 ips.

I need indefinite limit.
sawbuck
Junior Member
Posts: 366
Joined: 10 Dec 2006, 16:20

Re: DENY_IP_LIMIT

Post by sawbuck »

manuelfranco wrote: Do you know what happens if put DENY_IP_LIMIT = "0" ?
Limiting will be disabled. In other words an unlimited number of IPs can be added to csf.deny.
manuelfranco
Junior Member
Posts: 5
Joined: 15 Jul 2012, 19:53

Re: DENY_IP_LIMIT

Post by manuelfranco »

Thanks a Lot
dynamicnet
Junior Member
Posts: 48
Joined: 31 May 2012, 18:29
Location: Lancaster County PA US
Contact:

Re: DENY_IP_LIMIT

Post by dynamicnet »

Good day:

One area of caution is that the more ip's in deny, the more RAM you are going to be using on the box.

I used CSF to block a small DDoS attack that was using close to 8,000 IP addresses in the attack... thankfully the server had the RAM, but CSF used between 12 and 14 GB of RAM with that many deny's.

Thank you.
JonathanM
Junior Member
Posts: 1
Joined: 16 Jan 2013, 16:55

Re: DENY_IP_LIMIT

Post by JonathanM »

Hello, I have also got my default IP limit filled up and probably need to raise it.
How much does it effect the memory and what would be safe/recommended value to raise?
Currently my server status says about memory usage: 33.08% (669,136 of 2,022,744)

How big of a risk would it be if it starts to unblock oldest IP:s that are blocked maybe one year ago?
Post Reply