Anything changed with csf recently?

[roly]

Hi

over the last 2-3 weeks csf is blocking my ip and locking me out. i can log in and flush the blocks on a different ip. i've been using this for years without this issue and have made no changes myself, so i'm unsure if anything has changed with it's config with an update that anyone knows about that could cause this before i start investigating further? thanks in advance

 

[SEO Guru]

Im not seeing odd behaviour on my side.

You can always whitelist your own IP.

csf -a 123.456.789.10

Do you see the message/reason why your IP gets banned?

csf -g 123.456.789.10

 

[roly]

hi thanks for the advice, unfortunately i flushed blocks to get back in and i'm assuming that clears the logs as it doesn't show. i thought i had whitelisted but looks like my isp has changed my ip so readded. thanks again!

 

[Ohm J]

all logs should be store in "/var/log/lfd.log", and previous logs rotated will store as "lfd-{DATETIME}"

 

[rowebca]

You have to add your IP in csf.ignore (LFD will ignore it so no more blocks) or if your ip is in csf.allow you have to activate IGNORE_ALLOW (I'll not recommend this) in csf.conf.
Ip's in csf.allow will be blocked too by lfd.

Regards,

 

[Richard G]

(I'll not recommend this) in csf.conf.

Why not? Depends on what you put in the csf.allow list. If it's only your own ip's it doesn't matter, that way you can bypass firewall and won't be blocked either. It's not a security risk per definition. Unless you start putting users in the csf.allow which then I would not recommend.