Skip to main content

how: /usr/sbin/csf -g 'fragment of IP', no´t IP complet ??

Comments

4 comments

  • Jcats
    Yes, why not just give it a try? ;) csf -g 132.
    0
  • 000
    Yes, why not just give it a try? ;) csf -g 132.

    Thanks, you can see result in my CentOs 7 + cPanel: [root@cocacola ~]# /usr/sbin/csf -g 94.191.94.148 Table Chain num pkts bytes target prot opt in out source destination filter DENYIN 4 92 5520 DROP all -- !lo * 94.191.94.148 0.0.0.0/0 filter DENYOUT 4 0 0 LOGDROPOUT all -- * !lo 0.0.0.0/0 94.191.94.148 ip6tables: Table Chain num pkts bytes target prot opt in out source destination No matches found for 94.191.94.148 in ip6tables csf.deny: 94.191.94.148 # lfd: (sshd) Failed SSH login from 94.191.94.148 (CN/China/-): 5 in the last 3600 secs - Sun Sep 29 18:28:32 2019 [root@cocacola ~]#
    and now only FRAGMENT of IP: [root@cocacola ~]# /usr/sbin/csf -g 91* Table Chain num pkts bytes target prot opt in out source destination No matches found for 91* in iptables ip6tables: Table Chain num pkts bytes target prot opt in out source destination No matches found for 91* in ip6tables [root@cocacola ~]#
    0
  • 000
    ah!... we need REMOVE the character * oh god.... REGARDS! :-)
    0
  • cPanelLauren
    Glad you got the issue resolved! Thanks @Jcats !
    0

Please sign in to leave a comment.