sudo systemctl status csf lfd<\/code><\/p>\n\u0627\u06af\u0631 \u0633\u0631\u0648\u06cc\u0633\u0647\u0627 \u0628\u062f\u0648\u0646 \u0647\u06cc\u0686 \u0645\u0634\u06a9\u0644\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc\u0634\u0648\u0646\u062f\u060c CSF \u0631\u0627 \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0628\u0631 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 Debian 12 \u062e\u0648\u062f \u0646\u0635\u0628 \u0648 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0631\u062f\u0647\u0627\u06cc\u062f.<\/p>\n
\n\u0645\u0631\u062d\u0644\u0647 \u06f5: \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0627\u0632 \u0637\u0631\u06cc\u0642 CSF<\/h4>\n
\u06cc\u06a9\u06cc \u0627\u0632 \u0648\u06cc\u0698\u06af\u06cc \u0647\u0627\u06cc \u06a9\u0644\u06cc\u062f\u06cc CSF \u0627\u0645\u06a9\u0627\u0646 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647 \u0628\u0647 \u062f\u0648 \u0631\u0648\u0634 \u0631\u0627\u06cc\u062c \u0645\u06cc \u067e\u0631\u062f\u0627\u0632\u06cc\u0645: \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0644\u06cc\u0633\u062a\u0647\u0627\u06cc IP BLOCK \u0648 \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0631 \u0627\u0633\u0627\u0633 \u0645\u0648\u0642\u0639\u06cc\u062a \u062c\u063a\u0631\u0627\u0641\u06cc\u0627\u06cc\u06cc \u0622\u0646\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 GeoIP.
\n\u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633\u0647\u0627\u06cc IP \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0644\u06cc\u0633\u062a\u0647\u0627\u06cc IP BLOCK<\/p>\n
\nCSF \u0628\u0647 \u0634\u0645\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0644\u06cc\u0633\u062a\u0647\u0627\u06cc IP BLOCK \u0622\u062f\u0631\u0633\u0647\u0627\u06cc IP \u0631\u0627 \u0645\u0633\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f. \u0641\u0627\u06cc\u0644 \/etc\/csf\/csf.blocklists \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0648\u06cc\u0631\u0627\u06cc\u0634\u06af\u0631 \u0645\u062a\u0646 \u062e\u0648\u062f \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f:<\/p>\n
sudo nano \/etc\/csf\/csf.blocklists<\/code><\/p>\n\u0628\u0631\u0627\u06cc \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633\u0647\u0627\u06cc IP \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 Spamhaus\u060c \u062e\u0637\u0648\u0637 \u0632\u06cc\u0631 \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f:<\/p>\n
SPAMDROP|86400|0|https:\/\/www.spamhaus.org\/drop\/drop.txt
\nSPAMDROPV6|86400|0|https:\/\/www.spamhaus.org\/drop\/dropv6.txt
\nSPAMEDROP|86400|0|https:\/\/www.spamhaus.org\/drop\/edrop.txt<\/code><\/p>\n\u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0648\u06cc\u0631\u0627\u06cc\u0634\u06af\u0631 \u0645\u062a\u0646 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f.<\/p>\n
\n\u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0627\u0632 \u0637\u0631\u06cc\u0642 GeoIP<\/p>\n
\n\u0631\u0648\u0634 \u062f\u06cc\u06af\u0631 \u0628\u0631\u0627\u06cc \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0622\u062f\u0631\u0633\u0647\u0627\u06cc IP \u0628\u0631 \u0627\u0633\u0627\u0633 \u0645\u0648\u0642\u0639\u06cc\u062a \u062c\u063a\u0631\u0627\u0641\u06cc\u0627\u06cc\u06cc \u0622\u0646\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 GeoIP \u0627\u0633\u062a. \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc CSF \u0631\u0627 \u062f\u0648\u0628\u0627\u0631\u0647 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f:<\/p>\n
sudo nano \/etc\/csf\/csf.conf<\/code><\/p>\n\u0628\u0631\u0627\u06cc \u0645\u0633\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0648\u0631\u0648\u062f\u06cc \u0627\u0632 \u06a9\u0634\u0648\u0631\u0647\u0627\u06cc \u062e\u0627\u0635\u060c \u06af\u0632\u06cc\u0646\u0647\u0647\u0627\u06cc CC_DENY \u0648 CC_ALLOW \u0631\u0627 \u067e\u06cc\u062f\u0627 \u0648 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0622\u0646 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f. \u0645\u062b\u0627\u0644:<\/p>\n
CC_DENY = "RU,CN"
\nCC_ALLOW = "US,GB,DE,NL,SG"<\/code><\/p>\n\u0627\u06af\u0631 \u062a\u0631\u062c\u06cc\u062d \u0645\u06cc \u062f\u0647\u06cc\u062f \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 MaxMind GeoIP \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f\u060c \u06af\u0632\u06cc\u0646\u0647 CC_SRC \u0631\u0627 \u0628\u0647 \u06f1 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f \u0648 \u06a9\u0644\u06cc\u062f \u0645\u062c\u0648\u0632 MaxMind \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0642\u0633\u0645\u062a MM_LICENSE_KEY \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f.
\n\u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0648\u06cc\u0631\u0627\u06cc\u0634\u06af\u0631 \u0645\u062a\u0646 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f.<\/p>\n
\u0628\u0631\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u062c\u062f\u06cc\u062f\u060c \u0633\u0631\u0648\u06cc\u0633 \u0647\u0627\u06cc CSF \u0648 lfd \u0631\u0627 \u0645\u062c\u062f\u062f\u0627 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n
sudo csf -ra<\/code><\/p>\n\n\u0645\u0631\u062d\u0644\u0647 \u06f6: \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 CSF Web UI<\/h4>\n
CSF \u06cc\u06a9 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0645\u0646\u0627\u0633\u0628 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0648\u0628 (UI) \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0634\u0645\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u06a9\u0646\u062f. \u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 CSF\u060c \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc CSF \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f:<\/p>\n
\nsudo nano \/etc\/csf\/csf.conf<\/code><\/p>\n\u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 CSF Web UI\u060c \u06af\u0632\u06cc\u0646\u0647 UI \u0631\u0627 \u0631\u0648\u06cc \u06f1 \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f:<\/p>\n
\nUI = "1"<\/code><\/p>\n\u06af\u0632\u06cc\u0646\u0647 \u0647\u0627\u06cc UI_PORT\u060c UI_IP\u060c UI_USER \u0648 UI_PASS \u0631\u0627 \u0628\u0647 \u0645\u0642\u0627\u062f\u06cc\u0631 \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f. \u0645\u062b\u0627\u0644:<\/p>\n
\nUI_PORT = "1048"
\nUI_IP = "127.0.0.1"
\nUI_USER = "shapehost"
\nUI_PASS = "passw0rd"<\/code><\/p>\n\u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0648\u06cc\u0631\u0627\u06cc\u0634\u06af\u0631 \u0645\u062a\u0646 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f.<\/p>\n
![\"\u062a\u0646\u0638\u06cc\u0645\u0627\u062a](\"https:\/\/files.parsdev.com\/blog\/2024-7\/zBzakZ7DKkWWnu3eO4D15HfX1MR43wC4uXLtrbdK.png\")
<\/p>\n
\n\u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 CSF\u060c \u0622\u062f\u0631\u0633 IP \u067e\u0627\u0628\u0644\u06cc\u06a9 \u062e\u0648\u062f \u0631\u0627 \u0628\u0627 \u0627\u0641\u0632\u0648\u062f\u0646 \u0622\u0646 \u0628\u0647 \/etc\/csf\/csf.allow \u0648 \/etc\/csf\/ui\/ui.allow \u062f\u0631 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f:<\/p>\n
sudo nano \/etc\/csf\/csf.allow
\nsudo nano \/etc\/csf\/ui\/ui.allow<\/code><\/p>\n\n\u0622\u062f\u0631\u0633 IP \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n
# single ip
\nyour_public_ip_address<\/code><\/p>\n\u0641\u0627\u06cc\u0644 \u0647\u0627 \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0646\u06cc\u062f \u0648 \u0627\u0632 \u0648\u06cc\u0631\u0627\u06cc\u0634\u06af\u0631 \u0645\u062a\u0646 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f.
\n\u0628\u0631\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a\u060c \u062e\u062f\u0645\u0627\u062a CSF \u0648 lfd \u0631\u0627 \u0645\u062c\u062f\u062f \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n
\nsudo csf -ra<\/code><\/p>\n<\/span>\u0646\u062a\u06cc\u062c\u0647<\/span><\/h4>\nCSF \u06cc\u06a9 \u0627\u0628\u0632\u0627\u0631 \u0636\u0631\u0648\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u0646\u06cc\u062a \u0633\u0631\u0648\u0631 \u0634\u0645\u0627 \u0627\u0633\u062a \u0648 \u0627\u062f\u063a\u0627\u0645 \u0622\u0646 \u0628\u0627 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062d\u0628\u0648\u0628 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0633\u0631\u0648\u0631 \u0622\u0646 \u0631\u0627 \u0642\u062f\u0631\u062a\u0645\u0646\u062f\u062a\u0631 \u0645\u06cc \u06a9\u0646\u062f. \u0628\u0627 CSF\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u062e\u06cc\u0627\u0644\u062a\u0627\u0646 \u0631\u0627\u062d\u062a \u0628\u0627\u0634\u062f \u0648 \u0628\u062f\u0627\u0646\u06cc\u062f \u06a9\u0647 \u0633\u0631\u0648\u0631 \u0634\u0645\u0627 \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0648 \u062d\u0645\u0644\u0627\u062a \u0645\u062e\u0631\u0628 \u0645\u062d\u0627\u0641\u0638\u062a \u0645\u06cc \u0634\u0648\u062f.
\n\u062a\u0628\u0631\u06cc\u06a9 \u0645\u06cc \u06af\u0648\u06cc\u0645! \u0634\u0645\u0627 \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a CSF (Config Server Firewall) \u0631\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 Debian 12 \u062e\u0648\u062f \u0646\u0635\u0628 \u0648 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0631\u062f\u0647 \u0627\u06cc\u062f. \u0634\u0645\u0627 \u06cc\u0627\u062f \u06af\u0631\u0641\u062a\u0647 \u0627\u06cc\u062f \u06a9\u0647 \u0686\u06af\u0648\u0646\u0647 \u0628\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u067e\u0648\u0631\u062a\u0647\u0627\u06cc \u062e\u0627\u0635 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u06cc\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u0647\u0627\u06cc Ping \u0631\u0627 \u0641\u0639\u0627\u0644 \u06cc\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f\u060c \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u0647\u0627\u06cc \u0627\u062a\u0635\u0627\u0644 \u0631\u0627 \u062a\u0646\u0638\u06cc\u0645 \u0648 \u0622\u062f\u0631\u0633\u0647\u0627\u06cc IP \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0644\u06cc\u0633\u062a \u0647\u0627\u06cc IP BLOCK \u0648 GeoIP \u0645\u0633\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0634\u0645\u0627 CSF Web UI \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0627\u0646\u06cc\u062a\u0648\u0631 \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0631\u0627\u062d\u062a \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062e\u0648\u062f \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0627\u06cc\u062f.
\n <\/p>\n","protected":false},"excerpt":{"rendered":"CSF \u06cc\u0627 Config Server Firewall \u0627\u0628\u0632\u0627\u0631 \u0642\u062f\u0631\u062a\u0645\u0646\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 Stateful Packet Inspection (SPI) \u0628\u0631 \u0627\u0633\u0627\u0633…","protected":false},"author":1,"featured_media":2273,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":"","footnotes":""},"categories":[8],"tags":[27],"class_list":{"0":"post-2274","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-server","8":"tag-vps","9":"cs-entry"},"_links":{"self":[{"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/posts\/2274","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/comments?post=2274"}],"version-history":[{"count":3,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/posts\/2274\/revisions"}],"predecessor-version":[{"id":5391,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/posts\/2274\/revisions\/5391"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/media\/2273"}],"wp:attachment":[{"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/media?parent=2274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/categories?post=2274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/parsdev.com/blog\/wp-json\/wp\/v2\/tags?post=2274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}