APF and Multiple IPs with Cpanel - How?!

J

JonathanLIVE

Well-Known Member
Nov 1, 2003
50
0
156
I used to use APF... until I found it to be as effective as hiding behind a rosebush from a shotgun when scanners and hackers would hit a server that has multiple IP addresses aliased to it.

APF only binds to the main server IP and completely ignores cpanels ipalias IPs.

So when a scanner hits a server with something like 32 or more IPs, it gets hit hard enough to degrade the servers performance significantly.. at times if they are more aggressive they even bring down a server.

I went through documentation, but found no solution to have APF bind to multiple IPs on a server.

I could be totally wrong.. but it would be great if someone managed to do this. The only thing that seems to work system wide is iptables.. but that is difficult to configure.

Can anybody offer a howto for having APF cover multiple IP addresses on a Cpanel server?

Thanks!
 
Alexandre

Alexandre

Member
PartnerNOC
Jan 21, 2004
19
0
151
U.S.A.
Actually, I don't like csf :)))
iptables -F makes the server inaccessible:)):)
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
X SOLVED APF firewall Security 6
S Change ssh port withoud APF or CSF Security 5
Tarak Nath APF to CSF Firewall Security 3
B Apf set_fastload Security 3
P How to add IP to the allow list in APF? Security 1
Similar threads
SOLVED APF firewall
Change ssh port withoud APF or CSF
APF to CSF Firewall
Apf set_fastload
How to add IP to the allow list in APF?
Top Bottom