Difference between revisions of "Main Page"

From Wiki.onotech.org
Jump to: navigation, search
(Firewalls/Blocked IPs)
(APF)
Line 7: Line 7:
 
Blacklist
 
Blacklist
 
  vim /etc/apf/deny_hosts.rules  
 
  vim /etc/apf/deny_hosts.rules  
 
  
 
Whitelist
 
Whitelist
 
  vim /etc/apf/allow_hosts.rules  
 
  vim /etc/apf/allow_hosts.rules  
 
  
 
Config file
 
Config file
 
  vim /etc/apf/conf.apf  
 
  vim /etc/apf/conf.apf  
 
  
 
Restart
 
Restart
 
  /etc/init.d/apf restart  
 
  /etc/init.d/apf restart  
 
  
 
Flush IP Tables
 
Flush IP Tables
iptables -F
+
iptables -F
  
  
CSF
+
===CSF===
 
Blacklist
 
Blacklist
 
  vim /etc/csf/csf.deny  
 
  vim /etc/csf/csf.deny  
 
  
 
Whitelist
 
Whitelist
 
  vim /etc/csf/csf.allow  
 
  vim /etc/csf/csf.allow  
  
 
+
Restart (both CSF and LFD)
Restart
+
  csf -ra
  csf -r
 
 
 
  
 
Configuration
 
Configuration
 
  vim /etc/csf/csf.conf  
 
  vim /etc/csf/csf.conf  
 
  
 
login failure log
 
login failure log
 
  /var/log/lfd.log  
 
  /var/log/lfd.log  
 
  
 
Fun Output, IP address and the LFD trigger that got it blocked:
 
Fun Output, IP address and the LFD trigger that got it blocked:

Revision as of 17:40, 1 October 2017

MediaWiki has been installed.

Consult the User's Guide for information on using the wiki software.

Firewalls/Blocked IPs

APF

Blacklist

vim /etc/apf/deny_hosts.rules 

Whitelist

vim /etc/apf/allow_hosts.rules 

Config file

vim /etc/apf/conf.apf 

Restart

/etc/init.d/apf restart 

Flush IP Tables

iptables -F


CSF

Blacklist

vim /etc/csf/csf.deny 

Whitelist

vim /etc/csf/csf.allow 

Restart (both CSF and LFD)

csf -ra 

Configuration

vim /etc/csf/csf.conf 

login failure log

/var/log/lfd.log 

Fun Output, IP address and the LFD trigger that got it blocked:

grep "*Blocked in csf*" /var/log/lfd.log | egrep -o '( (([0-9]{1,3}\.){3})[0-9]{1,3}|\[LF_.*)' | sed -e :a -e '$!N;s/\n\[/ \t==blocked for==\> \t\[/;ta' -e 'P;D' 


looks like

118.98.66.56    ==blocked for==> [LF_SMTPAUTH]
92.38.233.191   ==blocked for==> [LF_SSHD]
104.167.104.147 ==blocked for==> [LF_SSHD]
73.179.232.255  ==blocked for==> [LF_CPANEL]
118.163.76.38   ==blocked for==> [LF_SMTPAUTH]