Firewalls usually allow or block IP addresses. If you need to allow a hostname, you need to find the IP address and white list the IP address. If you use dynamic DNS services like noip, dyndns, the IP address of your hostname changes when your internet provider assigns you a new IP address. ConfigServer Security … Read more
There are 3 ways to whitelist an IP address in ConfigServer Security & Firewall (csf). Whitelisting an IP address will allow the IP address to access all ports on the server including any closed ports. For example, you can block SSH port 22 on the server. Then add your IP address to the whitelist, now … Read more
Cpanel Servers have a bruceforce attack detection module called cPHulk Brute Force Protection. In case your server have another bruteforce detection software like ConfigServer Security & Firewall, you may need to disable cPHulk Brute Force Protection as you don’t need 2 software for same purpose running on the server. To disable cPHulk Brute Force Protection, … Read more
Whem install csf firewall on Ubuntu 20.04, i get following error root@ok:~# csf *Error* The path to iptables is either not set or incorrect for IPTABLES [/usr/sbin/ip6tables] in /etc/csf/csf.conf at /usr/local/csf/lib/ConfigServer/URLGet.pm line 26. Compilation failed in require at /usr/sbin/csf line 21. BEGIN failed–compilation aborted at /usr/sbin/csf line 21. root@ok:~# This is because path for iptables … Read more
For non cpanel server, install perl modules On Ubuntu Once we have requirements installed, install csf with See csf
CSF Firewall come with standalone UI. This is disabled by default. On CentOS, install following requirments yum install perl-IO-Socket-SSL perl-Net-SSLeay perl-Net-LibIDN perl-IO-Socket-INET6 perl-Socket6 Edit CSF configuration file vi /etc/csf/csf.conf Find UI = “0” Replace with UI = “1” Change following settins as needed. UI_PORT = “6666” UI_USER = “username” UI_PASS = “password” By Default, only … Read more
To unban an IP from CSF firewall, run csf -dr IP_ADDR Here i have an IP blocked in firewall. [root@server22 ~]# iptables -L -n | grep 13.224.29.193 DROP all — 13.224.29.193 0.0.0.0/0 LOGDROPOUT all — 0.0.0.0/0 13.224.29.193 [root@server22 ~]# To see if CSF is blocking the IP, run csf -g IP_ADDR Example This command also … Read more
How to use CSF Firewall Firewall Configuration Restart csf Block an IP Whitelist an IP