When a firewall drops an IP address, is that IP permantely banned until I remove it? I ask because I receive so many emails about it dropping IPs, and my site traffic has been down so I hope it's not banning everyone on accident. Also, what is the command to remove an IP from the firewall. If it is removed, would it be added back if that same IP range tries to attack again? Thanks

what firewall do you have?

How can I find out? :( Someone else installed it for me but they are far too busy to ever answer their emails. I do know how to access it though perhaps this info can help you know what kind it is:

/etc/apf/

ok its apf

sounds like they have anti-dos to tight. you can disable it see if it helps. do this

pico /etc/apf/conf.apf

find


USE_AD="1"

set it to

USE_AD="0"

save and close, now


pico /etc/apf/deny_host.rules

remove the ips u dont want blocked.

then

/etc/apf/apf -f
/etc/apf/apf -s

see if that helps any. also feel free to msn me with any questions.

Thanks a lot I will try that :) BTW what is the command to remove the IP?

Thanks linuxguy :D