How to: Whitelist a hostname in ConfigServer Security and Firewall (CSF)
  • 30 Jun 2023
  • 1 Minute to read
  • Dark
    Light

How to: Whitelist a hostname in ConfigServer Security and Firewall (CSF)

  • Dark
    Light

Article summary

If your server has ConfigServer Security and Firewall installed (CSF), then you may find it necessary to whitelist a hostname as opposed to an IP address.

CSF has a file specifically for allowing hostnames called "csf.dyndns". Fully Qualified Domain Names (FQDN) are checked at a configurable interval of seconds, to poll for a change in the IP address. 

To whitelist a hostname:

1) SSH to the server
2) Open the file "/etc/csf/csf.dyndns" and add the hostname.
3) Open the file "/etc/csf/csf.conf" and set: DYNDNS = "300" (which would check for IP updates every 5 minutes).
Note: If you want the activity of the IP also ignored, set DYNDNS_IGNORE = "1"
4) Restart the firewall

That's it. The hostnames in csf.dyndns will automatically be allowed and the rules will refresh every 5 minutes.



Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Eddy AI, facilitating knowledge discovery through conversational intelligence