Author Topic: Spamhaus in CSF Firewall  (Read 4272 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Spamhaus in CSF Firewall
« on: December 15, 2021, 07:15:46 AM »
Hi guys
Is possible configure the Spamhaus in CSF Firewall?
If yes, anyone can help me?

Offline
***
Re: Spamhaus in CSF Firewall
« Reply #1 on: December 15, 2021, 10:14:14 PM »
Yes.
Check the file '/etc/csf/csf.blocklists'. You can enable three lists:
SPAMDROP
SPAMEDROP
SPAMDROPV6


Regards,
Netino

Offline
*
Re: Spamhaus in CSF Firewall
« Reply #2 on: December 16, 2021, 03:30:58 AM »
Thanks
One thing, yesterday I try block specific countries on CSF Firewall, but after that my websites are very slow
I have one website with A score on Gtmetrix, and now have F score
Any idea?

Offline
*
Re: Spamhaus in CSF Firewall
« Reply #3 on: December 16, 2021, 11:59:35 AM »
you have info about this in csf firewall, as using big block lists with firewall will slow down the server response time as it need to check each IP.
VPS & Dedicated server provider with included FREE Managed support for CWP.
http://www.studio4host.com/

*** Don't allow that your server or website is down, choose hosting provider with included expert managed support for your CWP.

Offline
***
Re: Spamhaus in CSF Firewall
« Reply #4 on: December 16, 2021, 09:41:08 PM »
Thanks
One thing, yesterday I try block specific countries on CSF Firewall, but after that my websites are very slow
I have one website with A score on Gtmetrix, and now have F score
Any idea?

To block countries, you must use the "Country Code Lists and Settings" section of '/etc/csf/csf.conf'.
There you must choose the database that will be used to find the countries for each IP address, MaxMind or db-ip, ipdeny, iptoasn.

Keep in mind that searching for the country of each IP address has a cost on the overall performance of the system too.
Each connection to your server must be searched by the country code.
Read that section to get informed.

Offline
*
Re: Spamhaus in CSF Firewall
« Reply #5 on: April 19, 2023, 03:03:05 PM »

Hi
Does this process add additional load to my server?


Yes.
Check the file '/etc/csf/csf.blocklists'. You can enable three lists:
SPAMDROP
SPAMEDROP
SPAMDROPV6


Regards,
Netino