Implement IPSET on csf on cPanel | Pheonixsolutions

Date posted: 03-06-2018

By default cPanel uses iptables to manage inbound and outbound connections. To improve performance and if we want to block large number of IP address in iptables may slow down the server and affect the network performance.

Note: IPset is not supported on Virtuozzo and openvz  kernels. If the cPanel server is running behind virtuzzo or openvz

Implementation:

Login to the server via SSH

Execute the below command to install ipset.

yum install ipset 

Open csf configuration and find the parameter called LF_IPSET and change to 1

vi /etc/csf/csf.conf

LF_IPSET="1"

Save the file using “:wq!”

Restart the csf service.

csf -r

 

Leave a Reply