csf and china

Portal Home > Knowledgebase > Articles Database > csf and china

Posted by sniperscope, 08-25-2011, 03:07 AM
hi is there any way to block entire chinese and korean ip addresses? So far i did, i logged in whm and added entire chinese and korean ip addresses but i want to add those list into csf block ip list too. regards
Posted by twikamltd, 08-25-2011, 03:20 AM
Yes there's an entry called CC_DENY I think in /etc/csf/csf.conf, just enter CN and whatever other countries you want, and reload CSF.
Posted by sniperscope, 08-25-2011, 05:01 AM
Hello nickakam thanks for reply. I just logged into whm admin and opened up csf configuration. I can not see any CC_DENY option(in my case i have but it says NOT SUPPORTED). But i found some settings which calls GLOBAL_DENY. Is this what you are talking about ?
Posted by sniperscope, 08-25-2011, 05:11 AM
All i want to block entire China, Korea(S and N both) and Russia I don't need visitors or even customer from them.
Posted by BeZazz, 08-25-2011, 06:07 AM
Have a read of or make a post at CSF Forums.
Posted by sniperscope, 08-25-2011, 06:08 AM
Their support form is useless
Posted by BeZazz, 08-25-2011, 06:14 AM
Are you running the latest version of CSF? If so when you run "Test iptables" what is the output you get?
Posted by sniperscope, 08-25-2011, 06:20 AM
yes i am using latest version because i dont see any warning in csf program. here is the test result. Testing iptables... Testing ip_tables/iptable_filter...OK Testing ipt_LOG...OK Testing ipt_multiport/xt_multiport...OK Testing ipt_REJECT...OK Testing ipt_state/xt_state...OK Testing ipt_limit/xt_limit...OK Testing ipt_recent...OK Testing xt_connlimit...OK Testing ipt_owner/xt_owner...OK Testing iptable_nat/ipt_REDIRECT...OK RESULT: csf should function on this server
Posted by BeZazz, 08-25-2011, 06:33 AM
look down further for CC_DENY I think were may of been looking at the IPv6 options.

Add to Favourites Print this Article