Flush CSF (csf.deny)

Portal Home > Knowledgebase > Articles Database > Flush CSF (csf.deny)

Posted by persianwhois, 05-15-2008, 04:54 PM
Hello, How can flush csf blocked ips? (csf.deny) Thanks
Posted by david510, 05-15-2008, 04:56 PM
run the following command. csf -f
Posted by jon-f, 05-16-2008, 12:55 AM
well that will flush the firewall , I dont think it deletes all denys. You really have to do that manually. Either make a small script like : rm -rf /etc/csf/csf.deny ; touch /etc/csf/csf.deny ; csf -r or just enter those commands.
Posted by whmcsguru, 05-16-2008, 02:31 AM
Exactly, and it doesn't even answer the person's original question. Now, please keep in mind that csf.deny is NOT the only place that ip addresses will be blocked. In /etc/csf/ you will find a file called csf.tempban . If the user was blocked for something, such as too many login failures, or something like that, yet NOT blocked enough times to be permamently blocked, they're put there, and blocked. The best answer is NOT to "flush CSF", but to get out there and remove the ip individually. Keeping hosts banned in CSF is good, especially if they are repeatedly abusing the system. HTH
Posted by david510, 05-16-2008, 03:08 AM
csf -f will only flush the firewall rules temporarily. When you restart csf all rules come into existence again. If you need to remove the IP ban permanently, remove the IP from the deny file.

Add to Favourites Print this Article