Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Currently I keep all of the blocked IPs for my CSF firewall in a single "csf.deny" file which is getting difficult to maintain. In an attempt to organize things a bit more (since not ALL of the IP blocks I deny changes frequently), I was wondering if CSF has the ability, like Apache with it's *.conf files, to load multiple files of my choosing?

share|improve this question
up vote 2 down vote accepted

I don't think you can do that but you can use an Include statement in your /etc/csf/csf.deny file

Include /etc/csf/csf.denytoo

Perhaps you can use that to help organise your blocked IP addresses ?

share|improve this answer
I'm pretty sure I posted the answer and accepted it (or had to wait before accepting it). This is weird that you could edit my posts and delete the original answer I gave. But yes, you are right. I can use Include to manage other IP's and have done so since posting this question. – user85569 Nov 21 '11 at 12:25
I haven't deleted any answers - I can't do that. There are no answers to this question that have been deleted either. Did you ask the question elsewhere ? – Iain Nov 21 '11 at 12:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.