Results 1 to 9 of 9

Thread: CSF Quick Deny

  1. #1
    Join Date
    Oct 2010
    Posts
    1,785

    CSF Quick Deny

    Can I use WHM CSF Quick Deny to block an IP range?

    xxx.xxx.xxx.0/255

    Google didn't turn up anything about WHM, only SSH. Thanks.

  2. #2
    Join Date
    Sep 2009
    Posts
    361
    You can use CDIR nomenclature so a /24 would block out from 0-255

  3. #3
    Join Date
    Oct 2010
    Posts
    1,785
    I keep getting failed message in CSF. Please show an example to block xxx.xxx.xxx.0 - xxx.xxx.xxx.255 in WHM CSF Quick Deny. Thank you.
    Last edited by TheJoker; 02-24-2011 at 12:47 AM.

  4. #4
    Join Date
    Feb 2006
    Location
    Melbourne, Australia
    Posts
    141
    As the above comments show in the csf.deny file;

    # CIDR addressing allowed with a quaded IP (e.g. 192.168.254.0/24)

    For the purpose of this post I just used the "Quick Deny" function to block 192.168.254.0/24 and it worked without an issue;

    Blocking 192.168.254.0/24...

    Adding 192.168.254.0/24 to csf.deny and iptables DROP...
    DROP all opt -- in !lo out * 192.168.254.0/24 -> 0.0.0.0/0
    DROP all opt -- in * out !lo 0.0.0.0/0 -> 192.168.254.0/24

    ...Done.
    Perhaps a reinstall of CSF might fix the issue? just a thought.

  5. #5
    Join Date
    Oct 2010
    Posts
    1,785
    Thanks. I thought that is what I was inputting last night but got an error. Anyhow, it's working now. I appreciate the assistance.

  6. #6
    Join Date
    Jan 2011
    Location
    India
    Posts
    1,453
    try CIDR it will definitely help you out to block the desired IPs.

  7. #7
    Join Date
    Oct 2002
    Location
    /roof/ledge
    Posts
    28,090
    Quote Originally Posted by humawebdesign View Post
    try CIDR it will definitely help you out to block the desired IPs.
    In your opinion is it really adding any value to threads to parrot what's already been said above?
    Your one stop shop for decentralization

  8. #8
    Join Date
    Feb 2006
    Location
    Melbourne, Australia
    Posts
    141
    I'd say it was more of "Let's see how further I can push my post count" comment.

  9. #9
    Join Date
    May 2004
    Location
    Corona, CA USA
    Posts
    386
    you can also add comments, like

    192.168.1/0/24 # that jerk I hate
    Skeptic Hosting
    Promoting a reality-based lifestyle choice
    Hosting by invitation only, nothing for sale

Similar Threads

  1. CSF Firewall: Edit csf.deny, the IP address deny file Currently:1000 permanent IP ban
    By crazyaboutlinux in forum Hosting Security and Technology
    Replies: 12
    Last Post: 02-09-2011, 02:08 AM
  2. csf.deny - banning users for viewing 5 pages
    By mike123106 in forum Hosting Security and Technology
    Replies: 2
    Last Post: 03-31-2010, 11:40 PM
  3. cron to flush ip from csf deny list except those marked as do not delete
    By sharmaine1111 in forum Hosting Security and Technology
    Replies: 6
    Last Post: 12-05-2009, 11:05 PM
  4. Flush CSF (csf.deny)
    By persianwhois in forum Hosting Security and Technology
    Replies: 4
    Last Post: 05-16-2008, 03:08 AM
  5. Quick CSF question about IP Allow/Deny
    By t325 in forum Hosting Security and Technology
    Replies: 0
    Last Post: 11-25-2006, 04:15 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •