IPSET and CC_DENY No Longer Working?

Post Reply
logout
Junior Member
Posts: 14
Joined: 17 Jul 2017, 01:51

Re: IPSET and CC_DENY No Longer Working?

Post by logout »

Did you get anywhere with this?

I'm seeing a similar issue where the license key is entered, but on some servers CSF cannot detect the country of IPs. It's configured in the same way you mentioned.

On the servers where it works there is a file:
-rw------- 1 root root 12649147 Dec 30 16:00 /var/lib/csf/Geo/GeoLite2-Country-Blocks-IPv4.csv

...which does not exist on servers where it does not work.

Any troubleshooting tips would be welcome!
logout
Junior Member
Posts: 14
Joined: 17 Jul 2017, 01:51

Re: IPSET and CC_DENY No Longer Working?

Post by logout »

An update. Some of our servers had the GeoLite2-Country-Blocks-IPv4.csv file but it was an old version from December 2019, other servers didn't have the file at all.

I talked to MaxMind support. Having the MaxMind account and generating a license key is not the only requirement. You also have to accept the GeoLite2 license agreement to complete the signup process.

"To add GeoLite2 to your account, you can use the 'GeoLite2 Signup' link, found towards the bottom of our account portal's left-side menu while logged in, here: https://www.maxmind.com/en/accounts/cur ... le/current "

After doing this, CSF has retrieved the latest GeoLite files on all servers:

-rw-rw-r-- 1 root root 10844160 Apr 24 17:00 /var/lib/csf/Geo/GeoLite2-Country-Blocks-IPv4.csv

... and CC_DENY/CC_ALLOW rules can detect countries.
Post Reply