Port range white list

[oim37]

Hello,

We use this on web server and it working good, but we also have proftpd in passive mode with (PassivePorts 49152 65535) and if we transfer many files proftpd create many connections and ban ip. Please add port-range white list.

[jgmdev]

You can try enabling ENABLE_PORTS and configuring your PORT_CONNECTIONS rules.

[oim37]

We try

ENABLE_PORTS=true PORT_CONNECTIONS="80:690:3600 443:690:3600 8443:690:3600"

service ddos restart (centos 7)

And try with totalcmd copy many php files. Soon we request mail and ip banned with this mail

---

Banned the following ip addresses on Thu Apr 2 12:35:19 UTC 2020 123.123.123.123:443 with 1 connections

---

123.123.123.123 - real ip connected and transfer many php files from ftp (Server and client without NAT) both have real ip.

P.S. (We use iptables on centos 7)