How to block countries in CSF firewall

Please note that Way to the Web Ltd. (the company behind ConfigServer) has closed permanently as ofn August 31, 2025. However, their free scripts will remain available under the GPLv3 license. For more details, see:

ConfigServer Services Announcement

cPanel now provides it's own CSF fork, for installation information please see the article here:

cPanel will provide its own fork of CSF starting Feb 25th 2026

Introduction

CSF has a feature that allows users to block countries by their country code.

cPanel will provide its own fork of CSF starting Feb 25th 2026

Procedure

You can block a country by adding its country code using the CC_DENY directive in the CSF configuration. Below is an example where three country codes are blocked:

CONFIG_TEXT: CC_DENY = "RU,CN,DE"

This setting can be adjusted within WHM by following these steps:

1. Navigate to "Plugins / ConfigServer Security & Firewall / Firewall Configuration".

2. From the Firewall Configuration screen, specify the countries to block in the field for the CC_DENY directive. This field is shown in the screenshot below:

3. Save your changes.