Implement IPSET on csf on cPanel | Pheonixsolutions

Date posted: 03-06-2018

By default cPanel uses iptables to manage inbound and outbound connections. To improve performance and if we want to block large number of IP address in iptables may slow down the server and affect the network performance.

Note: IPset is not supported on Virtuozzo and openvz  kernels. If the cPanel server is running behind virtuzzo or openvz

Implementation:

Login to the server via SSH

Execute the below command to install ipset.

yum install ipset 

Open csf configuration and find the parameter called LF_IPSET and change to 1

vi /etc/csf/csf.conf

LF_IPSET="1"

Save the file using “:wq!”

Restart the csf service.

csf -r

 

Leave a Reply

This website stores cookies on your computer. These cookies are used to provide a more personalized experience and to track your whereabouts around our website in compliance with the European General Data Protection Regulation. If you decide to to opt-out of any future tracking, a cookie will be setup in your browser to remember this choice for one year.

Accept or Deny