<table class="text">
<tr class="li1"><td class="ln"><pre class="de1">1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112 屏蔽某一个国家，修改csf.conf这个文件 －－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－ Here are some tweaks about CSF,so you can configure as you need. Back to the csf configuration directory,and edit the csf.conf configuration file: ＃cd /etc/csf/ ＃vi csf.conf 1. Don't Block IP addresses that are in the csf.allow files. By default lfd also will block an IP under csf.allow files,so if you want that an IP in csf.allow files never get blocked by lfd,then please go to the line 272 and change "IGNORE_ALLOW" to "1". This is useful wehn you have a static IP at home or in office and want to ensure that your IP never gets blocked by the firewall on your internet server. IGNORE_ALLOW = "1" 2. Allow Incoming and Outgoing ICMP. Go to the line 152 for incoming ping/ICMP: ICMP_IN = "1" And line 159 for outgoing ping ping/ICMP: ICMP_OUT = "1" 3. Block Certain Countrys CSF provide an option to allow and deny access by country using the CIDR (Country Code). Go to line 836 and add the country codes that shall be allowed and denied: CC_DENY = "CN,UK,US" CC_ALLOW = "ID,MY,DE" 4. Send the Su and SSH Login log by Email. You can set an email address that is used by LFD to send an email about "SSH Login" events and users that run the "su" command,go to the line 1069 and change the value to "1". LF_SSH_EMAIL_ALERT = "1" ... LF_SU_EMAIL_ALERT = "1" And then define the email address you want to use in line 588. LF_ALERT_TO = "mymail@mydomain.tld" If you want more tweaks,read the options in the "/etc/csf/csf.conf" configuration file.
