Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

cPHulk and Hardware Firewall Question

Discussion in 'Security' started by bgarrant, Sep 13, 2017.

Tags:
  1. bgarrant

    bgarrant Well-Known Member

    Joined:
    Jun 27, 2012
    Messages:
    68
    Likes Received:
    9
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    I have a cpanel server with a Juniper SRX 300 firewall. We block all ports other than web and email. FTP and cPanel access is whitelist only for client IPs. Since I have cphulk and a hardware firewall what extra benefit would CSF be if any? I tried CSF and it conflicts with our VPN since the Dynamic VPN feature changes IPs. Is cphulk and the hardware firewall secure? Do I lose or gain anything adding CSF since I have the hardware firewall?
     
    #1 bgarrant, Sep 13, 2017
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,442
    Likes Received:
    1,962
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Generally that configuration should be okay without CSF, but note that CSF offers several features beyond just standard port restrictions so it's difficult to say for sure. This question is likely better discussed on the CSF support forums:

    General Discussion (csf) - ConfigServer Community Forum

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Sep 13, 2017
  3. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,888
    Likes Received:
    90
    Trophy Points:
    78
    Location:
    India
    cPanel Access Level:
    Root Administrator
    By default, when you install CSF, it does cause issues on a VPN server, so it is not advised to have it installed on a VPN server..

    However, since you are using a hardware firewall, I feel there is no need to use a software firewall, however, if you still want to give it a try, you can configure the CSF and check if it works. Make sure below ports are added in the csf firewall..
    --------------- ---------------
    TCP_IN = "22,1194,33434:33523"
    TCP_OUT = "22,1194,33434:33523"
    UDP_IN = "1194"
    UDP_OUT = "1194"
    --------------- ---------------

    After doing so, also look for the file named csfpre.sh and add the below content to it:
    # vi /etc/csf/csfpre.sh
    --------------- ---------------
    iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

    iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT

    iptables -A FORWARD -j REJECT

    iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

    iptables -t nat -A POSTROUTING -j SNAT --to-source xx.xx.xx.xx

    replace xx.xx.xx.xx with your actual server IP. Save, exit, and restart csf.
    --------------- ---------------
    # csf -r
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 24x7server, Sep 13, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - cPHulk Hardware Firewall
  1. Metro2

    New Thread More about using cPhulk with CSF/LFD together

    Metro2, Dec 14, 2018 at 3:22 PM, in forum: Security
    Replies:
    2
    Views:
    75
    Metro2
    Dec 14, 2018 at 6:51 PM
  2. cowner

    cPHulk blacklist deny login but not view website?

    cowner, Nov 13, 2018, in forum: Security
    Replies:
    2
    Views:
    148
    cPanelMichael
    Nov 13, 2018
  3. Frankc

    CPHulk block own server IP address

    Frankc, Nov 1, 2018, in forum: Security
    Replies:
    1
    Views:
    96
    cPanelLauren
    Nov 2, 2018
  4. bgarrant

    ConfigServer Firewall vs Juniper SRX 300 with cPHulk

    bgarrant, Oct 2, 2018, in forum: General Discussion
    Replies:
    3
    Views:
    161
    cPanelLauren
    Oct 8, 2018
  5. Benjamin D.

    SOLVED cpHulk failed attempts list is now permanently empty?

    Benjamin D., Sep 28, 2018, in forum: Security
    Replies:
    12
    Views:
    280
    cPanelMichael
    Nov 6, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice