looking for firewall, csf not working

[SoftDux]

Hi all

I have tried Config Server Firewall, but after a server reboot, the VPS wouldn't be accessible, and I get the following error:

iptables: Unknown error 18446744073709551615 - no network connectivity

So, can someone please recommend another firewall to use with cPanel?

[brianoz]

Have you got the monolithic option enabled in CSF? That's required for operation with VPS systems.

Another possible firewall is APF, but CSF is about a 100 miles ahead of APF, so if you can, stay with CSF. (it's regularly maintained, and has a lot more security features).

On a completely unrelated note, I hear the new VPS optimized version of cpanel is pretty hot, you may want to look at that.

[BianchiDude]

Does CSF have a brute force detector?

What else does it have that APF doesn't?

[RSCChris]

Check the forum post about csf, but yes it has brute force. Advantages? The biggest is its ability to be easily controlled from within WHM. Full list of features here: http://configserver.com/cp/csf.html

[brianoz]

What does CSF have that APF doesn't?

• Regular maintenance - updates every month or so, with new features and/or fixes
  
• WHM interface (although I think Ryan may have added one to APF)
  
• Easy upgrade to the next version from shell or WHM
  
• preconfigured ready-to-go on cpanel
  
• Suspicious/excessive process reporting
  
• Suspicious file reporting
  
• Port scan detection and blocking
  
• Much better brute force detection and blocking including temporary blocks and the ability to NOT block authenticated POP users

Some of this may be inaccurate; for the final verdict you'd need to check documentation. For me the first item is the killer - CSF is regularly maintained whereas APF, until recently, hadn't released a new version for for years. Nothing wrong with that - APF was a ground breaker when it first came out, and I used and recommended it then, but I've moved to CSF.

[ckh]

What does CSF have that APF doesn't?

Geesh, guys, come on. You left out the most important one.

#1 Chirpy

[SoftDux]

Have you got the monolithic option enabled in CSF? That's required for operation with VPS systems.

Yes I have.

Another possible firewall is APF, but CSF is about a 100 miles ahead of APF, so if you can, stay with CSF. (it's regularly maintained, and has a lot more security features).

But it breaks my CentOS 5.1 x64 server to CentOS 5.1x64 XEN VPS, and apparently it's a OS problem, and nothing todo with CSF. Yet, when I uninstalled it, the VPS is fine. I can't afford to have VPS's going down cause the firewall causes problem.

[RadioRob1]

Sounds like a configuration issue.

Are you sure you're having it check the correct interface? Have you checked to make sure the right modules are loaded? When you load it in dev mode, are you able to create another connection?

I've had no issues before installing CSF on Centos 4/5... x86 or x86_64 on Xen.

[SoftDux]

yes I have the configuration set properly, and the test works fine, but th moment the VPS or server gets rebooted, I have no connection to the VPS. It took me a while to figure out (one of the google search results lead me to the forum threads on configserver.com's website) that CSF is causing the problem, and once I've uninstalled it, the VPS connected to the internet without a problem

[solder42]

Yes I am feeling same prpoblem, the thing which you told, I tried that but feeling the same trouble