2024-06-19, 03:54 PM
That's F2B output looks right. An example for my Nginx F2B rule.
I'm not sure what you mean by this. How are you able to tell "packets are flowing to 0.0.0.0"?
Code:
Chain f2b-nginx-botsearch (1 references)
target prot opt source destination
REJECT 0 -- 103.110.127.136 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 46.249.102.187 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 162.240.66.3 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 47.93.161.187 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 185.244.36.221 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 84.54.51.37 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 8.218.212.177 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 54.39.17.116 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 5.56.132.84 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 45.156.129.125 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 45.148.10.174 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 45.128.232.174 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 39.105.120.190 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 31.220.1.83 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 203.201.63.37 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 194.9.56.102 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 192.250.239.174 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 185.244.36.236 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 185.191.127.212 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 18.171.240.255 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 179.43.185.130 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 165.22.56.121 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 162.214.127.74 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 146.59.158.41 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 139.196.25.23 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT 0 -- 103.74.116.72 0.0.0.0/0 reject-with icmp-port-unreachable
RETURN 0 -- 0.0.0.0/0 0.0.0.0/0
(2024-06-19, 03:30 PM)crashx Wrote: However, the IP is never blocked and it appears that all packets are flowing to 0.0.0.0. For the life of me, I cannot figure out why. Does anyone have any insight?
I'm not sure what you mean by this. How are you able to tell "packets are flowing to 0.0.0.0"?