Since our new server has been installed, we are very pleased to use this one handy tool (thanks to Chirpy) to protect and enhance server security, introducing CSF (ConfigServer Security and Firewall) , the features are well addressed at this website http://www.configserver.com/cp/csf.html. A very detailed feature rich piece of software that would help system administrators in their day to day task as well as keeping out unwanted traffic. You can specifically choose what comes in and what goes out from your server.
The question that most users and admins asks is how to install it ? Based from experience and with a little tinkering on the software, here is how to install it.
1. Download the software from http://www.configserver.com/free/csf.tgz. Chirpy keeps the program updated, so you do not have to worry about getting the old version or the newer one, the program itself also has an option for an upgrade.
2.
tar -xzf csf.tgz
cd csf
sh install.sh
Next, test whether you have the required iptables modules:
perl /etc/csf/csftest.pl
(csftest.pl will be ran to check if you have the needed modules to load the firewall)
Note : Be sure to disable AFD/BFD firewall if you have them on your server, this can cause unexpected issues.
3. Edit /etc/csf/csf.conf and use your custom rules, be sure to set TESTING=0 if you are done customizing the rules
4. Start csf through init.d /etc/init.d/csf start and be amazed with the results.
I will be coming up with advanced administration including the email notification of the firewall rules.
Monday, March 2, 2009
Installing CSF
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment