我在cPanel安装上设置了CSF,以帮助pipe理防火墙并提供powershell保护。 CSF(包括LFD,其中包含的一个function)就是能够阻止列表上的IP地址,例如spamhaus或OpenBL。 虽然这一开始工作完美,我开始注意到我的LFD日志文件中反复出现的条目:
无法检索块列表RBN – 无法下载:404 – 未find
检查csf.blocklists文件后,看起来列出的URL( http://rules.emergingthreats.net/blockrules/rbn-ips.txt )确实不再存在。
我的解决scheme似乎很简单,我只是从csf.blocklists删除了RBN阻止csf.blocklists ,那就是这样。 不幸的是,在重新启动LFD之后,阻止列表被放回到原来的位置。
进一步testing后,似乎我不能修改这个文件,每次我改变它(即使只是添加一条评论或一个空行),并重新启动LFD,我的变化被还原。
该文件中的标题注释如下所示:
############################################################################### # Copyright 2006-2013, Way to the Web Limited # URL: http://www.configserver.com # Email: [email protected] ############################################################################### # This file contains definitions to IP BLOCK lists. # # Uncomment the line starting with the rule name to use it, then restart csf # and then lfd # # Each block list must be listed on per line: as NAME|INTERVAL|MAX|URL # NAME : List name with all uppercase alphabetic characters with no # spaces and a maximum of 9 characters - this will be used as the # iptables chain name # INTERVAL: Refresh interval to download the list, must be a minimum of 3600 # seconds (an hour), but 86400 (a day) should be more than enough # MAX : This is the maximum number of IP addresses to use from the list, # a value of 0 means all IPs # URL : The URL to download the list from # # Note: Some of thsese lists are very long (thousands of IP addresses) and # could cause serious network and/or performance issues, so setting a value for # the MAX field should be considered # # After making any changes to this file you must restart csf and then lfd # # If you want to redownload a blocklist you must first delete # /etc/csf/csf.block.NAME and then restart csf and then lfd # # Each URL is scanned for an IPv4/CIDR address per line and if found is blocked
我做了,因为它说:修改文件,重新启动CSF,然后LFD,但仍然是我的变化不断恢复。
我也尝试重新安装CSF或从Web UI修改csf.blocklists,这两个解决scheme都解决了我的问题。
服务器运行CloudLinux 6.8 cPanel 58.0,使用CSF v9.24
任何帮助解决这个问题将非常感激!