Spamhaus in CSF Firewall

[tutods]

Hi guys
Is possible configure the Spamhaus in CSF Firewall?
If yes, anyone can help me?

[Netino]

Yes.
Check the file '/etc/csf/csf.blocklists'. You can enable three lists:
SPAMDROP
SPAMEDROP
SPAMDROPV6


Regards,
Netino

[tutods]

Thanks
One thing, yesterday I try block specific countries on CSF Firewall, but after that my websites are very slow
I have one website with A score on Gtmetrix, and now have F score
Any idea?

[studio4host]

you have info about this in csf firewall, as using big block lists with firewall will slow down the server response time as it need to check each IP.

[Netino]

Thanks
One thing, yesterday I try block specific countries on CSF Firewall, but after that my websites are very slow
I have one website with A score on Gtmetrix, and now have F score
Any idea?

To block countries, you must use the "Country Code Lists and Settings" section of '/etc/csf/csf.conf'.
There you must choose the database that will be used to find the countries for each IP address, MaxMind or db-ip, ipdeny, iptoasn.

Keep in mind that searching for the country of each IP address has a cost on the overall performance of the system too.
Each connection to your server must be searched by the country code.
Read that section to get informed.

[makp27]

Hi
Does this process add additional load to my server?

Yes.
Check the file '/etc/csf/csf.blocklists'. You can enable three lists:
SPAMDROP
SPAMEDROP
SPAMDROPV6


Regards,
Netino