Using CSF with IPSET, what is a good configuration?

Good thread :)

I have DENY_IP_LIMIT = 10000
and DENY_TEMP_IP_LIMIT = 1000

These don't seem to be causing any problems. Although I know that Temp IPs have been dropped in the past - ( If the limit is reached the oldest IP's in the ban list will be removed and allowed regardless of the amount of time remaining for the block ).

I don't have IPSET enabled. So that's something I might play with if I get some time in the near future.
Good info from everyone.
 
Back
Top