Page 1 of 1

DENY_IP_LIMIT

Posted: 22 Jul 2012, 15:34
by manuelfranco
Excuseme

Do you know what happens if put DENY_IP_LIMIT = "0" ?

I need more 1000 ips limit, if i write DENY_IP_LIMIT = "0" csf.deny work with 0 or limit max is 1000 ips.

I need indefinite limit.

Re: DENY_IP_LIMIT

Posted: 22 Jul 2012, 16:04
by sawbuck
manuelfranco wrote: Do you know what happens if put DENY_IP_LIMIT = "0" ?
Limiting will be disabled. In other words an unlimited number of IPs can be added to csf.deny.

Re: DENY_IP_LIMIT

Posted: 22 Jul 2012, 17:15
by manuelfranco
Thanks a Lot

Re: DENY_IP_LIMIT

Posted: 24 Jul 2012, 03:13
by dynamicnet
Good day:

One area of caution is that the more ip's in deny, the more RAM you are going to be using on the box.

I used CSF to block a small DDoS attack that was using close to 8,000 IP addresses in the attack... thankfully the server had the RAM, but CSF used between 12 and 14 GB of RAM with that many deny's.

Thank you.

Re: DENY_IP_LIMIT

Posted: 16 Jan 2013, 17:05
by JonathanM
Hello, I have also got my default IP limit filled up and probably need to raise it.
How much does it effect the memory and what would be safe/recommended value to raise?
Currently my server status says about memory usage: 33.08% (669,136 of 2,022,744)

How big of a risk would it be if it starts to unblock oldest IP:s that are blocked maybe one year ago?