Do I need to install Config Firewall if WHM already have CPHulk Brute Force Protection ?

calvinphanctt

Active Member
Mar 27, 2007
44
0
156
Hello everyone,

How are you doing? Do I need to install Config Firewall if WHM already have CPHulk Brute Force Protection ?

Sincerely,
Calvin
 

24x7ss

Well-Known Member
Sep 30, 2014
272
17
68
India
cPanel Access Level
Root Administrator
Twitter
Yes, csf firewall provide much security to your server. If you want to block any particular country then you can use csf firewall. Attacks like portflood, SYN, FYN attack csf firewall is useful.
 

keat63

Well-Known Member
Nov 20, 2014
1,913
259
113
cPanel Access Level
Root Administrator
I also wondered the same thing.
I'm pretty sure that I blocked all IP's (except a few) in CPHULK, but still managed to successfully log in to WHM, from an unknown IP. Although, i've done so much experimenting recently, i may be mistaken.

I put this down to the fact that, it was first time single successful login, so wasn't categorised as a brute force attack.
I assume a brute force attack would be multiple failed logins.

I then configured Host access in WHM to only allow 2 IP's and my test IP fails even with a single login attempt.
 

mageshm

Well-Known Member
Apr 17, 2014
90
1
6
Chennai, INDIA
cPanel Access Level
DataCenter Provider
@ keat63,

Yes, exactly right. If you configured Host access to particular IP and you can't login to ssh using other IP's except allowed host IP's but CSF giving more features.

Install and feel the security.

If you are using cPanel/WHM 11.46, i advise you to check "cPanel Security Advisor" option because this also giving some protection to server.
 

keat63

Well-Known Member
Nov 20, 2014
1,913
259
113
cPanel Access Level
Root Administrator
I've just installed CSF, but now this is something extra for me to try and figure out how it works.
I'll leave this on the default settings until i get a chance to play.
 

keat63

Well-Known Member
Nov 20, 2014
1,913
259
113
cPanel Access Level
Root Administrator
Calvin.

Installing CSF is really easy.
Copy and paste the following in to your SSH terminal.

rm -fv csf.tgz
wget http://www.configserver.com/free/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh

It will appear as a plugin at the bottom of WHM.
CSF is quite indepth and complex though, so we will no doubt be back here for more assistance.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,222
463
Hello :)

Yes, it's a good idea to install a firewall management utility such as CSF. While cPHulk is helpful, it's not intended as a replacement for a firewall.

Thank you.