Control Web Panel

Security => CSF Firewall => Topic started by: tutods on December 15, 2021, 07:15:46 AM

Title: Spamhaus in CSF Firewall
Post by: tutods on December 15, 2021, 07:15:46 AM

Hi guys
Is possible configure the Spamhaus in CSF Firewall?
If yes, anyone can help me?

Title: Re: Spamhaus in CSF Firewall
Post by: Netino on December 15, 2021, 10:14:14 PM

Yes.
Check the file '/etc/csf/csf.blocklists'. You can enable three lists:
SPAMDROP
SPAMEDROP
SPAMDROPV6


Regards,
Netino

Title: Re: Spamhaus in CSF Firewall
Post by: tutods on December 16, 2021, 03:30:58 AM

Thanks
One thing, yesterday I try block specific countries on CSF Firewall, but after that my websites are very slow
I have one website with A score on Gtmetrix, and now have F score
Any idea?

Title: Re: Spamhaus in CSF Firewall
Post by: studio4host on December 16, 2021, 11:59:35 AM

you have info about this in csf firewall, as using big block lists with firewall will slow down the server response time as it need to check each IP.

Title: Re: Spamhaus in CSF Firewall
Post by: Netino on December 16, 2021, 09:41:08 PM

Quote from: tutods on December 16, 2021, 03:30:58 AM

Thanks
One thing, yesterday I try block specific countries on CSF Firewall, but after that my websites are very slow
I have one website with A score on Gtmetrix, and now have F score
Any idea?

To block countries, you must use the "Country Code Lists and Settings" section of '/etc/csf/csf.conf'.
There you must choose the database that will be used to find the countries for each IP address, MaxMind or db-ip, ipdeny, iptoasn.

Keep in mind that searching for the country of each IP address has a cost on the overall performance of the system too.
Each connection to your server must be searched by the country code.
Read that section to get informed.

Title: Re: Spamhaus in CSF Firewall
Post by: makp27 on April 19, 2023, 03:03:05 PM

Hi
Does this process add additional load to my server?

Quote from: Netino on December 15, 2021, 10:14:14 PM

Yes.
Check the file '/etc/csf/csf.blocklists'. You can enable three lists:
SPAMDROP
SPAMEDROP
SPAMDROPV6


Regards,
Netino