CSF Firewall Allow Domains Having Dynamic IP
​How to whitelist a hostname in ConfigServer Security and Firewall installed (CSF)




If your server has ConfigServer Security and Firewall installed (CSF), then you may find it necessaryto whitelist a hostname as opposed to an IP address.
CSF has a file specifically for allowing hostnames called "csf.dyndns". Fully Qualified Domain Names (FQDN) are checked at a configurable interval of seconds, to poll for a change in the IP address. If the IP address has changed iptables will be updated!

WHM :

firewall lfd - Login Failure Daemon
lfd Dynamic DNS Allow




lfd Dynamic DNS # /
aws .



settings
300 DYDNS 5




---------------------------------------
Terminal
---------------------------------------

To whitelist a hostname:
1) SSH to the server

2) Open the file "/etc/csf/csf.dyndns" and add the hostname.

3) Open the file "/etc/csf/csf.conf" and set DYNDNS = "300" (which would check for IP updates every 5 minutes).
Note: If you want the activity of the IP also ignored, setDYNDNS_IGNORE = "on"

4) Restart the firewall
That's it. The hostnames in csf.dyndns will automatically be allowed and the rules will refresh every 5 minutes.


WHM/CPANEL DYNAMIC DNS (DDNS)

:
https://help.serversaustralia.com.au...-installed-CSF
https://www.plothost.com/kb/whitelist-hostnames-csf/
https://forum.directadmin.com/thread...stnames.64114/