cPFence provides robust tools for managing IP databases (IPDB) and protecting against DDoS attacks. This guide will help you use these features effectively.
The cPFence WebUI makes it easy to manage IPDB and DDoS protection modules across all your servers in one click!. You can enable, disable, or restart the IPDB service, activate or deactivate DDoS protection, and switch under-attack mode with just a click. All actions shown in the screenshot are available from the Tools & Utilities section in your browser, with no command line required.
- Open the cPFence WebUI on your Main Control Panel server.
- Go to Tools & Utilities in the sidebar menu.
- In the IPDB / DDoS Protection Module section, click the button for the action you want: enable/disable IPDB, enable/disable DDoS Protection, or toggle Under-Attack mode.
IPDB CLI Commands
Enable IPDB
- This command activates the cPFence IPDB service, applying country settings and necessary configurations.
cpfence --enable-ipdbDisable IPDB
- This command deactivates the cPFence IPDB service, stopping any active IPDB features.
cpfence --disable-ipdbRestart IPDB
- This command restarts the cPFence IPDB service, refreshing all IPDB/DDoS settings and configurations.
cpfence --restart-ipdbDDoS Protection Commands
Enable DDoS Protection
- This command activates DDoS protection with a default limit of 100 connections. You can adjust the limit as needed.
cpfence --enable-DDosDisable DDoS Protection
- This command deactivates DDoS protection, setting the connection limit to a high value (5000) to allow normal traffic.
cpfence --disable-DDosUnder Attack Mode
Activate Under Attack Mode
- Use this command when your server is under a heavy DDoS attack. It will apply aggressive protections to mitigate the attack.
cpfence --under-attack-onDeactivate Under Attack Mode
- Once the attack has subsided, use this command to restore normal protection settings.
cpfence --under-attack-offMonitor blocked attacks by IPDB in real time
Or use CLI :
cpfence --monitor-ipdb-blocksAdditional Information
- To adjust DDoS protection settings,go to WebUI > System Settings > edit the
CONNECTIONS_LIMITvalue and save. - Or edit the
CONNECTIONS_LIMITvalue manually in/opt/cpfence/config.conf. - Restart the cPFence IPDB service after making changes to apply the new settings.
Need Further Assistance?
If you encounter any issues or need additional help, feel free to reach out to our support team via your client portal.
