- Linux Distribution and version used on your server: Ubuntu Linux 12.04.1 - ISPConfig version: 3.0.4.6 Under 'Apps & Addon packages' I have a blank list, with only 'ispapp' showing up under 'local App-ID'. Clicking on 'Update package list' does nothing. Under 'Software repository' I do have http://repo.ispconfig.org/addons/ listed with a green check. I'm looking for a way to block IPs on demand, like how csf does, but want the UI to work within ISPConfig, or find another package that does the same thing. (Basic > Firewall is too basic for this)
There are no addons available yet, thats why the list is empty. A more advanced firewall is available in ispconfig 3.0.5, it then supports ufw besides the current bastille firewall. Blocking of ip addresses is handled by fail2ban in a ispconfig setup, fail2ban should already be installed if you followed the perfect setup guide. So ip blocking is not part of the firewall, it is done by fail2ban and uses internally iptables rules.
Thanks, I have fail2ban installed - but does ISPConfig have a UI for fail2ban? I'm trying to mirror functionality a client is used to from using csf on Cpanel. Does the new ufw have a UI baked into ISPConfig?
Fail2ban bans ip adressed based on rules that are applied on e.g log files, the filters are configured in config files. Ufw has a interface in ispconfig but it is not meant for blicking ip adresses on demand, the ufw interface is made to configure access based on ports for your server.
Thanks, this helps me understand things much better, so is there a way in ISPConfig to block individual IPs like you can with csf in cpanel? I'm looking for any way, with a module, add/on, whatever... can csf be run with its own front end (I haven't found a way and have been looking)
No, thats not available yet. You might want to make a featurerequest in the bugtracker for that. http://bugtracker.ispconfig.org
