Opening port 2224 - FirewallD is not running

[psytanium]

Hello,

I have to open port 2224, according to Godaddy using this documentation.
But when I open Terminal and inssert the command

sudo firewall-cmd --permanent --zone=public --add-port=2224/tcp

An error is displayed in red saying: FirewallD is not running

What does it mean ? How can I open this port ?

Thanks

 

[psytanium]

Fixed. using

1. sudo firewall-cmd --state
   
2. systemctl unmask firewalld
3. systemctl enable firewalld
4. systemctl start firewalld

Port opened.
Now what is recommended ? I disbale FirewallD ? I have Firewall TableIP installed.

Thanks

 

[GOT]

Do you have another firewall interface installed like CSF? If so you should turn off and disable firewalld and use the CSF configuration files instead.

 

[psytanium]

Yes I have CSF installed, now it is disbaled and FirewallD enabled.
I'm thinking of uninstalling CSF and keep FirewallD enabled, I tired thos commands:

cd /etc/csf

sh uninstall.sh

But when I run sh uninstall.sh, nothing happen. Why cant remove CSF ?

 

[GOT]

Personally, I would suggest the opposite, keep CSF and ditch firewalld. CSF makes managing the firewall super easy, its very extensible and does a lot more than you could do with firewalld manually.

 

[psytanium]

I disabled FirewallD and Enable CSF and added the port 2224 as allowed (incoming and outgoing) but Godaddy showed me again the same error regarding port 2224 closed. So I enabled again FirewallD.

But how can I uninstall CSF ?

 

[GOT]

Did you restart csf after editing the conf?

/etc/csf/uninstall.sh

 

[psytanium]

I didn't edited the config, but added the port number in CSF configuration :

Allow incoming TCP ports
Allow outgoing TCP ports

 

[GOT]

Yes but when you do that you have to reload the firewall

 

[psytanium]

Yes but when you do that you have to reload the firewall

I think i did what you are saying, when I add the ports and click Change, the page load and display a message saying : Changes saved. You should restart both csf and lfd.

With a button "Restart CSF + LFD" I clicked on it.

Do you know a SSH command to display the openned ports ?

 

[GOT]

iptables --list --numeric |grep 2224

should show something like

ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2224
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2224

 

[cPanelLauren]

I agree with the suggestion to use CSF instead of firewalld especially for the UI it offers for configuration.

You might also check to ensure that CSF/LFD is out of testing mode, none of the changes you make to it when in testing mode are put into effect.

 

[psytanium]

I agree with the suggestion to use CSF instead of firewalld especially for the UI it offers for configuration.

You might also check to ensure that CSF/LFD is out of testing mode, none of the changes you make to it when in testing mode are put into effect.

Me too I prefer it because of the UI. Now I turned it On, and disable FirewallD. and testing mode is Off in both.

The error returned to Godaddy dashboard.

How can I make sure the port is open ? I tried to run the command

ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:2224

it returned bash: ACCEPT: command not found

Thanks

 

[cPanelLauren]

If you're using CSF though I wouldn't be making manual changes to iptables which is what it looks like you were attempting to do. In the configuration for CSF for TCP Inbound and Outbound you need to add the ssh port you're trying to open if you're trying to change the SSH port you also need to add it in the sshd_config at /etc/ssh/sshd_config

 

[psytanium]

I added the port number in Firewall configuration :

• TCP_IN
• TCP_OUT
• UDP_IN
• UDP_OUT

Saved and restarted both CSF and LFD, I opened the file /etc/ssh/sshd_config using nano. How and where can I add the port number ?

Thanks.

 

[cPanelLauren]

Hi @psytanium

There's a line in the config file that is commented out like so:

#Port 22

You'd just remove the comment and add the port you want there and save

 

[psytanium]

I changed #port 22 to port 2224 in sshd_config, disable FirewallD, enabled CFS, restarted CSF, LFD and the server.
Logged in to Godaddy dashboard, again red alert, Danger, the port 2224 is closed.

What other possibilities can we try ?

Thanks for the help.

 

[cPanelLauren]

Did you also restart sshd? Is there somewhere in the provider's dashboard where you can manage ports as well?

 

[psytanium]

Can you help me uninstall CSF ?

 

[cPanelLauren]

They provide instructions on how to uninstall in the install.txt: https://download.configserver.com/csf/install.txt

cd /etc/csf
sh uninstall.sh