How to block countries in CSF firewall

Please note that Way to the Web Ltd. (the company behind ConfigServer) has announced it will close permanently on August 31, 2025. However, their free scripts will remain available under the GPLv3 license. For more details, see:

ConfigServer Services Announcement

Introduction

CSF has a feature that allows users to block countries by their country code.

Procedure

You can block a country by adding its country code using the CC_DENY directive in the CSF configuration. Below is an example where three country codes are blocked:

CC_DENY = "RU,CN,DE"

This setting can be adjusted within WHM by following these steps:

1. Navigate to "Plugins / ConfigServer Security & Firewall / Firewall Configuration".

2. From the Firewall Configuration screen, specify the countries to block in the field for the CC_DENY directive. This field is shown in the screenshot below:

3. Save your changes.