KISS My Firewall cpanel config ?'s

[Networkologist]

Newbie Nervousness - and my error log is growing faster then the national deficit because of all the probes for ida and counter.cgi, whatever that is

base and broadcast address

Before I step off a cliff, thought it best if I ask a question or two before I install KISS.

main ip is something like 207.xx.xx6.xxx and assigned ip's 207.xx.xx7.xxx
So, would my entries for the base and broadcast addresses look like:

BASE
207.xx.xx6.0
207.xx.xx7.0

BROADCAST
207.xx.xx6.255
207.xx.xx7.255

Then, for CONFIG #1, I would add ALL of my ip's exactly as they have ben assigned by RS? 207.116.111.11 207.222.226.22, etc ?

Then for CONFIG#5, for cpanel, add these ports:
21 - FTP - TCP
22 - SSH - TCP
25 - SMTP - TCP
53 - DNS - TCP & UDP
80 - HTTP - TCP
110 - POP3 - TCP
143 - IMAP - TCP
443 - HTTPs - TCP
465 - sSMTP - TCP
993 - sIMAP - TCP
995 - sPOP3 - TCP
2082 - Cpanel - TCP
2083 - secure Cpanel
2086 - WHM - TCP
2087 - secure WHM
2095 - WebMail - TCP
2096 - secure WebMail
3306 - MySQL - TCP
6666 - Melange - TCP
7786 - Ichange - TCP

Am I overlooking anything?

TIA

 

[sexy_guy]

Well nobody know what KISS is around here unless they are frequent users on RS. Care to explain it to everyone so they have a clue?

 

[Networkologist]

It is with great honor...

Always open for alternatives, but here's the thread:

http://forum.rackshack.net/showthread.php?s=&threadid=14401

And here's where to get it:

http://www.geocities.com/steve93138/

Appears to work well according to the feedback on RS.

 

[sexy_guy]

Your link is dead for those who dont have an account on the Rackshack forums so im afraid its not much help.

 

[Networkologist]

It's the next to last thread on this page:


http://forum.rackshack.net/forumdisplay.php?s=&forumid=19

 

[casey]

Originally posted by sexy_guy
Your link is dead for those who dont have an account on the Rackshack forums so im afraid its not much help.

It worked for me, and I don't have an account...

 

[jamesbond]

Networkologist, did you manage to get CPanel updates working by adding those extra ports (2080-2099) to KISS ?

 

[Networkologist]

Will try it tommorow

See this thread:

http://forums.cpanel.net/showthread.php?s=&threadid=8331

And the thread Marty pointed to:

http://forums.cpanel.net/showthread.php?s=&threadid=4948&highlight=ports