| By :
Dirik Hameed
This guide will show how to manage firewalls for server hosting. This guide is specifically designed for those who run their dedicated server in an automated manner. This guide will instruct you on how create and manage multiple profiles for server hosting (if you need them). It is up to you whether you want to run them manually or on a scheduled basis. First task is to launch the dedicated server from the Dedicated Server profile. Configure the way you want your profile setup and start server hosting. For security purposes it better to acquire BFD before installing a firewall on dedicated hosting servers. Brute Force Detection (BFD) runs scripts to parse applicable logs to check for authenticity failure. APF (Advanced Policy Firewall) is one of the best firewalls out there. If you want an easy to use and easy to configurable firewall then APF is the right choice for its policy based iptables. It comes with a unique subset feature tailored for both veterans and novices. Packaged in multiple formats APF is ideal for deployment on any environment. You will require root SSH access to your server to continue. Log in to your root user from su through SSH. Extract the packages in your temporary folder. Next run the installation file. You will receive a confirmation message. Now that installation is done its time to configure the firewall. Let's go over the general info's to get your firewall running. The contents of this guide will not refer to all the features of the firewall. All the features are explained in the README file and the configuration file should you need them. Look up the 'block' list from 'DShield.org' to gather information's of networks which exhibited suspicious activity. You need to use the 'common ingress' and 'common egress' commands in your Cpanel Server. These commands should be compatible with Ensim Servers too, although that's not guaranteed. Start the firewall, but before that make sure you have saved all changes made. After launch you have commands available for actions like restart, flush, list, status, allow host, deny host etc. Unless you see any problems change the DEV option. Go to cron and stop the firewall from clearing itself every 5 minutes. It is recommended for this value to be zero after you have checked everything. Save all your changes and restart the APF. To start APF at boot time automatically look for commands in the README. Recently APF included the AntiDOS feature for logs. It's better to take some time and fiddle with some features like 'alerts by email'. This feature is very useful when you are concerned with extra security. You should frequently check the logs to see which hosts have been allowed or denied from your dedicated server. If you need to block hosts you can start doing that now. If you want to block comments as well you should get the latest version of APF. Use the d flag before the IP address to block them. Now you have a secure firewall for your server hosting.
|