Thread: Installed a firewall - I keep getting block notices

Long story short, I figured I ought to have a firewall on my VPS so I turned it on through Virtuozzo, then I couldn't access WHM, they said that that firewall was mainly for Plesk accounts and installed a WHM addon called "ConfigServer Security & Firewall - csf v3.28", I went in and enabled on the 'low' setting.

I've been getting security alerts all day of IPs blocked for failing to access the server via SSH 5 times. All the IPs are out of Asia and certainly no one who has accounts on my server.. I wonder how long this has been going on?? :eek: It's kind of startling..I'm thinking of blocking the whole range of the APNIC, I have no Asian members anyhow.

Yeah that's the one I run and yeah it blocks attempts non stop.

Makes you glad you installed one hey?

BTW some of the servers hitting you will be servers that were compromised in the past, not all will come from one area

Makes you wonder how many hack attempts you have had over the years, does isn't???

Originally Posted by GRIM

Yeah that's the one I run and yeah it blocks attempts non stop.

Makes you glad you installed one hey?

BTW some of the servers hitting you will be servers that were compromised in the past, not all will come from one area

Very glad. You're the head server dude around here, you should've told me about this before! Do you recommend leaving it on the low setting or perhaps bumping up to medium?

Originally Posted by LeenkzMike

Makes you wonder how many hack attempts you have had over the years, does isn't???

Really makes you think. It's like having a robber at your door that cannot get through the door, I'd still like to at least know he was there. :eek:

lol I dont' know that much, I have mine all running at medium I believe High can be a bit too much at times.