Score:0

CSF Deny an IP Range Exclude specific IP on specific port

gi flag

I've bunch of ips / networks added to csf.deny

csf.deny
1.1.0.0/19 # do not delete

However i want to allow 1.1.1.1 on port 80 and 443 with csf.allow

csf.allow
tcp|in|d=80|s=1.1.1.1
tcp|in|d=443|s=1.1.1.1

is not working and

csf.allow
1.1.1.1

not working either

  • If i add IP adress to both csf.allow and csf.ignore it works but opens all ports which i don't want to
  • Adding "tcp|in|d=80|s=1.1.1.1" to both csf.allow & csf.ignore not working
  • Adding "tcp|in|d=80|s=1.1.1.1" to both csf.allow & 1.1.1.1 csf.ignore not working
  • Adding 1.1.1.1 to csf.ignore not working either

Tried CSF forums but got no replies in 3 days :) I would appreciate any ideas. Thanks in advance.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.