Can anyone recommend a firewall to install on my VPS using CentOS5.3.
Please explain why should I choose it or what are its advantages.
And do firewalls make your VPS slower by consuming some resources?
Do you recommend a software firewall when behind a hardware firewall?
All of our servers are behind Cisco ASA 5505 firewalls which we rent from Liquidweb. All are being managed correctly and setup to there optimal levels. With hardware firewalls firmly in place, do you still recommend a software firewall such as APF or IPTables (we're talking linux); in our opinion we see it as an extra administration overhead. If this is however untrue, we will change out thinking.
Please recommend a firewall
I need a firewall which could do the following:-
- Run in transparent mode
- With bandwidth control and reporting based on IP
- Intrusion detection and prevention
- Open source
I am trying Clark Connect but I could not make it to run on transparent mode, else this product is good enough for me.
Looking for a firewall appliance to stick before two dell servers that are going into a co-location data center.
Do you guys have any favorite FIREWALL appliances? I am looking at the CISCO PIX 501, because it seems to be the standard, but there are others that do virusscan, and malware scans at the hardware level before it enters the servers which caught my interest.
Such As: ....
Ok so you need a firewall. Well we recommend using APF. The following are the instructions you need to install
1) Login to your box as root
2) Download the APF Source (current version 0.9.3.3) ...........
I am thinking about install CSF firewall (without cPanel or any control Panel) in the master (the dedicated is virtualized with OpenVZ).
I no have services (only the OpenVZ panel to manage -hypervm-) and no extra services. Only for increase secutiry on master and avoid security problems-related.
Its recomendable to use any firewall in Master? Could be problematic on future?
I need to open the vps ports in use on master firewall?
provider asks me not to install firewall?
I have a dedicated server
I wanted to install a firewall my provider told me I don't need one because they have iptables and if I want I can ask them to include an ip in there
what do they mean?
I don't need a firewall? will it harm if I install a firewall for myself?
I have read on this forums and google CSF seem to be the best firewall out there, so i installed it configure and run it. After the installation i found that i received a lot time out error on web service. Page take a lot longer to load. I think it's my configuration.
Can someone take a look at my configuration if possible please share your configuration. I really like to have CSF run without poor performance on web service.
TESTING = "0"
TESTING_INTERVAL = "5"
AUTO_UPDATES = "1"
ETH_DEVICE = "eth1"
ETH_DEVICE_SKIP = ""
TCP_IN = "20,21,22,25,53,80,110,143,443,465,953,993,995,2077,2078,2082,2083,2086,2087,2095,2096,8184"
TCP_OUT = "20,21,22,25,37,43,53,80,110,113,443,587,873,953,2087,2089,2703"
UDP_IN = "20,21,53,953"
UDP_OUT = "20,21,53,113,123,873,953,6277"
ICMP_IN = "1"
ICMP_OUT = "0"
SMTP_BLOCK = "1"
SMTP_ALLOWLOCAL = "0"
MONOLITHIC_KERNEL = "0"
DROP = "DROP"
DROP_LOGGING = "1"
DROP_IP_LOGGING = "1"
DROP_ONLYRES = "0"
DROP_NOLOG = "67,68,111,113,135:139,445,513,520"
PACKET_FILTER = "1"
DROP_PF_LOGGING = "0"
VERBOSE = "1"
SYSLOG = "0"
DYNDNS = "0"
RELAYHOSTS = "1"
DENY_IP_LIMIT = "100"
GLOBAL_ALLOW = ""
GLOBAL_DENY = ""
GLOBAL_IGNORE = ""
LF_GLOBAL = ""
LF_DAEMON = "1"
LF_TRIGGER = "0"
LF_TRIGGER_PERM = "1"
LF_SELECT = "1"
LF_SSHD = "3"
LF_SSHD_PERM = "1"
LF_FTPD = "3"
LF_FTPD_PERM = "1"
LF_SMTPAUTH = "3"
LF_SMTPAUTH_PERM = "1"
LF_POP3D = "5"
LF_POP3D_PERM = "1"
LF_IMAPD = "5"
LF_IMAPD_PERM = "1"
LF_HTACCESS = "5"
LF_HTACCESS_PERM = "300"
LF_MODSEC = "0"
LF_MODSEC_PERM = "1"
LF_CPANEL = "3"
LF_CPANEL_PERM = "3600"
LF_CSF = "1"
LF_SSH_EMAIL_ALERT = "1"
LF_SU_EMAIL_ALERT = "1"
LF_SCRIPT_ALERT = "1"
LF_SCRIPT_LIMIT = "100"
LF_SCRIPT_PERM = "0"
LF_DIRWATCH = "60"
LF_DIRWATCH_DISABLE = "1"
LF_DIRWATCH_FILE = "1"
LF_INTEGRITY = "3600"
LF_INTERVAL = "300"
LF_PARSE = "5"
LF_EMAIL_ALERT = "1"
LT_EMAIL_ALERT = "1"
LT_POP3D = "60"
LT_IMAPD = "0"
RT_RELAY_ALERT = "1"
RT_RELAY_LIMIT = "100"
RT_RELAY_BLOCK = "0"
RT_AUTHRELAY_ALERT = "1"
RT_AUTHRELAY_LIMIT = "100"
RT_AUTHRELAY_BLOCK = "0"
RT_POPRELAY_ALERT = "1"
RT_POPRELAY_LIMIT = "100"
RT_POPRELAY_BLOCK = "0"
RT_LOCALRELAY_ALERT = "1"
RT_LOCALRELAY_LIMIT = "100"
RT_LOCALRELAY_BLOCK = "0"
LF_DSHIELD = "86400"
LF_DSHIELD_URL = [url]
LF_SPAMHAUS = "86400"
LF_SPAMHAUS_URL = [url]
LF_BOGON = "86400"
LF_BOGON_URL = [url]
CT_LIMIT = "300"
CT_INTERVAL = "60"
CT_EMAIL_ALERT = "1"
CT_PERMANENT = "1"
CT_BLOCK_TIME = "1800"
CT_SKIP_TIME_WAIT = "0"
CT_STATES = ""
PT_LIMIT = "30"
PT_INTERVAL = "60"
PT_SKIP_HTTP = "0"
PT_USERPROC = "8"
PT_USERMEM = "100"
PT_USERTIME = "1800"
PT_USERKILL = "0"
PT_LOAD = "30"
PT_LOAD_AVG = "5"
PT_LOAD_LEVEL = "6"
PT_LOAD_SKIP = "3600"
PT_SMTP = "0"
IPTABLES = "/sbin/iptables"
MODPROBE = "/sbin/modprobe"
IFCONFIG = "/sbin/ifconfig"
SENDMAIL = "/usr/sbin/sendmail"
NETSTAT = "/bin/netstat"
PS = "/bin/ps"
FUSER = "/sbin/fuser"
VMSTAT = "/usr/bin/vmstat"
LS = "/bin/ls"
MD5SUM = "/usr/bin/md5sum"
TAR = "/bin/tar"
CHATTR = "/usr/bin/chattr"
HTACCESS_LOG = "/usr/local/apache/logs/error_log"
MODSEC_LOG = "/usr/local/apache/logs/error_log"
SSHD_LOG = "/var/log/secure"
SU_LOG = "/var/log/secure"
FTPD_LOG = "/var/log/messages"
SMTPAUTH_LOG = "/var/log/exim_mainlog"
SMTPRELAY_LOG = "/var/log/exim_mainlog"
POP3D_LOG = "/var/log/maillog"
IMAPD_LOG = "/var/log/maillog"
CPANEL_LOG = "/usr/local/cpanel/logs/login_log"
SCRIPT_LOG = "/var/log/exim_mainlog"
I heard that CSF firewall will block the ips but still its useful to install? or is there any other method to stop to automatically block the ips from csf? Just want to know about it.
View 14 Replies View RelatedI'm in the process of installing PPA on infrastructure running Parallels Cloud Server. Each container has 2 interfaces, one public facing and a private interface for inter-server communication.
No problems installing PPA 11.5 (specifying IP's on commandline) or adding service nodes however, the firewall rules the documentation speaks of are nowhere to be seen? i.e.:
Important: After the installation, PPA creates the special firewall chain PPA-SN-Rules-INPUT used for communication with service nodes. Do not change it, otherwise, you will not be able to add service nodes to PPA.Click to expand...
Has this been dropped from PPA 11.5 ? (I recall seeing the firewall settings in 11.1) There is also no sign of the ppa.firewall tool that is also mentioned.
The only rule I see inserted is for Postgres on the management node, and 2 for pleskd on all of the nodes (open to world!).
I've found a dedicated server at a great price and plan to stick with it, my first ( already have 2 vps accounts ). I don't have the money for a hardware firewall. However, I do have a chance to renew a Kerio WinRoute Firewall license from way back.
Does anyone think this would be better than the default windows 2003 firewall?
Can anyone recomend a VPN in the UK I can use?
I will have a firewall/router on my end and vpn into the UK. I am not tech savvy and was told this was the setup I needed by who I thought i was going to be using.
Is it possible to install Plesk 12 to Debian Jessie with the autoinstall script?
View 7 Replies View RelatedI'm looking to purchase either vps or a dedicated server with cpanel/whm included in the price.
Must be uk based and have great uptime.
No real budget but obiouvsly i am looking for the best deal.
what do you think of godaddy? and what os do you recomand?
what do you think of godaddy? and what os do you recomand?
Is it recommended to use a VPS for online gaming like the mmorpg? Any recommendation on which hosting shall i get from for the VPS?
View 8 Replies View RelatedDoes anyone have experience with a good IRC VPS provider? I want to run an couple of BNC's. Unmanaged is fine. My budget for this would be $20/month.
View 14 Replies View Relatedcan anyone recommend a decent nl host with offers at present on dedi servers, looking to purchase in next week
View 4 Replies View RelatedI've been thinking about getting a dedicated server in the EU, as the UK is just to expensive to rent a dedicated server.
I've read reviews of the two hosts I found on the net (OVH and 1&1) and none were all that favourable. (Especially 1&1 heh)
anyone recommend some alternative EU providers? or perhaps any reasonable priced UK services?
I am currently on shared hosting (i will not mention who with) however since I have been with them my site has been down about 4 times. The good thing is my site hadnt launched it was just a placeholder page so nothing critical.
Due to the above issues, I think i might want to get a VPS, it is essential there is no downtime, its a new site and I dont want our reputation to suffer due to downtime.
Can you guys recommend a few providers? My requirements are as follows:
100 MB unmetered dedicated
750 G HD
8GB Ram
Linux
I looked at Iweb and Choopa, but I am trying to see if there are better, more economical, options out there.
I'm running a pretty large site that brings in about 80k unique each month, what would be a good setting to lower sync floods settings in csf configuration?
View 1 Replies View RelatedRecently I bought Kingston and supertalent 2GB DDR2-667 UNB memory. Both of them don't work on supermicro PDSMI+.
When I run memtest86 and windows application, they keep giving me a lot of error message.
Anyone have this experience before.
memory that can work on this supermicro board?
I've been shoping around for a web server and found this one from freecom:
[url]
does anyone know of any other/better products out there? It needs to have LAMP or WAMP along with FTP, and firewall.
my max is 40$ . Pls recommed me a new seedbox , bigger HDD than leeware 's, unmeteread , allow torrenting and good speed certainly. Leeware 's speed is now not good
View 5 Replies View Relatedmy web is laschicasdelgordo.com.ar and have aprox 10 gb of bandwith for a day. the other problem is the speed.. in argentina have good speedy but in USA or SPAIN is very slowly. the thing is i dont have too much money for pay a dedicated server.. and in Argentina de hosting plans are very expensive and slowly.. but i dont know american hosting.
well.. i need this
1- accept adult content
2- price $30 -$ 50 for month
3- 500 or more bandwith
4- 256-512 ram
5- cpanel
6- 5 - 10 gb hard disk
7- celeron 2200 or more
OK, after investigating nearly 30 hosts over the last month we're in the final...
Telephone support was essential for me and both hosts have answered the phone instantly ever time I've rang them, no matter what time of day.
Both have packages with multiple-domain hosting.
Both have generally positive reviews in this and other forums and also on other review sites.
LunarPages has rave reviews like no other host in this category, but their price is significantly more for the multiple domain package:
Lunarpages: $25.50 - 4 GB storage - 200 GB bandwith
Midphase: $12 - 7 GB storage - 'Unlimited' bandwith
Both include a free domain.
Storage/bandwith llimits don't mean much to me because I know I will not fill them.
Was wondering what other people's experiences had been with these two hosts please?
after posting here at WHT ive really learnt much about overselling and cpu usage.
now with some questions again,
1GB space
around 50gb transfer
around $6 a month
hosted in USA
very well established company that would never shut down like tomorrow.
just list the hosts down and let me consider them.
Looking for a windows dedicated server. At least dual core, 2gigs of ram, 10mb unmetered preferably and os xp/2003.
Content is racy, but not illegal. So need a host that can deal with that also.
Can anyone recommend a linux antivirus? I know such a thing isn't widely used however we'd like a way to scan attachments uploaded on a vbulletin forum to be scanned so other users don't get infected.
View 13 Replies View RelatedDoes anyone have any recommendations for a GOOD shared/reseller host? Geekstorage has had good reviews here, but I've been sorely disappointed in the frequent downtime I've had on two separate servers. Looking to move elsewhere soon if I can find someone else.
So -
Price isn't really an issue. I need at least 20GB of storage. Bandwidth also not an issue.