firewalld config change to default

[mixo]

Hello,

I use firewalld firewall on a server with CPANEL. I created ipset files for trusted and web developer zones and removed the service named cpanel from the public zone. After the update, the public.xml file has changed and the cpanel service is open to the public zone. I don't want this. What can I do?

 

[cPanelLauren]

I'd suggest using host access control to manage who can access cPanel and WHM as well as ensuring you've configured Firewalld in accordance with the instructions here:How to Configure Your Firewall for cPanel & WHM Services | cPanel & WHM Documentation

Instructions for Host Access can be found here: Host Access Control | cPanel & WHM Documentation

 

[mixo]

This instruction opens ssh and port 2087 worldwide. I think it's dangerous. someone has already hacked my server because of this six months ago. I can protect ssh with RSA 4096 or ed25519 and PasswordAuthentication no, but what to do with 2087?