A list of IP addresses and CIDR addresses that the login failure daemon should ignore and not block.
• One IP address per line.
• CIDR addressing allowed with a quaded IP.
• Only list IP addresses. Anything else will be ignored.
| Format | Description |
|---|---|
| IP address | 203.0.113.1 |
| CIDR | 203.0.113.0/24 |
A list of fully qualified and partial domain names that will be resolved then ignored by login failure daemon blocking.
| Format | Description |
|---|---|
| FDQN | FQDN or subset starting with a dot eg. www.example.com or .example.com |
A list of usernames that are ignored during the LF_EXPLOIT SUPERUSER check.
| Format | Description |
|---|---|
| username | One username per line. |
| File | Description |
|---|---|
/etc/csf/csf.ignore |
A list of IP addresses that will be ignored by all LFD checks. |
/etc/csf/csf.rignore |
A list of domains and partial domain that lfd process tracking will ignore based on reverse and forward DNS lookups. |
/etc/csf/csf.suignore |
A list of usernames that are ignored during the LF_EXPLOIT SUPERUSER check. |