WHM → Lion Server Firewall → Overview or Firewall → IP / CIDR.
- Allow — permanent trust (
/etc/lsf/lsf.allow). Beats deny, blocklist and GeoIP. - Deny — permanent block (
/etc/lsf/lsf.deny). - Remove — drop from both lists.
- Simulate — read-only decision.
IPv4, IPv6 and CIDR are accepted.
lsf -a 203.0.113.10 "office" lsf -d 198.51.100.4 "abuse" lsf -r 198.51.100.4 lsf -ta 203.0.113.10 7200 lsf --ignore-add 203.0.113.10 "scanner"
Temporary entries expire only if lsf-reaper.timer is running. Ignore means “never auto-ban”; it does not open ports.
