ip blocked in csf/lfd how to remove from command line?

Portal Home > Knowledgebase > Articles Database > ip blocked in csf/lfd how to remove from command line?

Posted by akasharya, 07-22-2010, 02:43 AM
My IP has been blocked in csf/lfd firewall due to too many login attempts of webmin user account. I do not have cpanel installed on the server and webmin is no more accessible so please guys help me how to unblock the ip from ssh coz ssh session is still running.
Posted by DiegoRBaquero, 07-22-2010, 02:49 AM
Edit the denied IPs file with your favorite command file editor
Posted by akasharya, 07-22-2010, 02:54 AM
I checked in csf.deny list but I have not found anything there. My webmin login page is opening but when I provide username password then it shows following error"Error - Access denied. The user has been blocked because of too many authentication failures." any suggestions?
Posted by DiegoRBaquero, 07-22-2010, 03:30 AM
Webmin blocked you, not CSF.
Posted by crazyaboutlinux, 07-22-2010, 03:50 AM
try this # csf -dr IP here
Posted by powerplaybegins, 07-22-2010, 05:03 AM
Some more command line tips: csf -d : block IP csf -a : allow IP csf -dr : Deny removal csf -ar : Allow removal For more command line options please try csf --help
Posted by akasharya, 07-22-2010, 05:06 AM
Thanks to all of you people but I have checked and found that its webmin who is blocking my ID but could not find anything to unblock my IP. in which location it stores the entry of IP?
Posted by VIPoint, 07-22-2010, 05:15 AM
If webmin has blocked your IP address, then you can remove the IP block by deleting the line from this file /var/webmin/blocked
Posted by Isaac Newton, 07-22-2010, 05:24 AM
If you don't find it anywhere else, check the IP in the iptables using the following command: Thank You.
Posted by jjsanchez, 10-05-2013, 05:26 PM
if this command return "true", or: DROP all -- 0.0.0.0/0 ¿with which command we can allow?
Posted by Joker911, 10-05-2013, 06:32 PM
You can use iptables -A INPUT -s [IP] -j ACCEPT
Posted by Hemanth Kumar, 10-05-2013, 07:14 PM
Just flush the tables. If you have installed csf then use csf -f If you are running with iptables then use iptables --flush There are several chain that are being created when the ip is getting blocked due to login attempts. Dropping the ip from the firewall may not fix the issue. If you are technically good then you can search for firewall chain like BOGON else flush the firewall. Hope this fix your issue. <> Last edited by bear; 10-05-2013 at 07:53 PM.
Posted by thenesta_test, 05-28-2015, 04:07 AM
I finished setup csf firewall but how do you test it? how it work?
Posted by takserver, 05-28-2015, 04:32 AM
For remove blocked ip: csf -dr YOURIPADDRESS For whitelist ip: csf -a YOURIPADDRESS