How to block via csf IP and its subnet?

Question

firewall

Good day to all. Blocked IP presumably DDos do on the server because. so many requests.
csf: IP xxx is already temporarily blocked
but at the same time in the logs it continues to send requests and create a load on the server. How to completely block IP using csf?

Answer 1

It is logical that it appears in the log) If this is DDOS, then blocking will not help you, because. The idea behind DDOS is channel recycling. It sends you traffic in order to reduce the bandwidth of the channel and it doesn’t matter that you block it, the traffic still reaches the server and is discarded.
Fighting DDOS
- use a CDN
- increase your bandwidth and server capacity
- negotiate with an upstream provider to block IP upon request. Like so, if you have BGP ( https://habr.com/ru/company/FastVPS/blog/207628/ ).
- find out through the whois of the provider and write him a letter