| By :
Dirik Hameed
The purpose of this article is to show you how to set up firewalls for dedicated servers. If you prefer to run your dedicated server in an automated manner then this guide is for you. Follow the steps to find out how you can handle multiple profiles in server hosting (for general issues and others). It is up to you whether you want to run them manually or on a scheduled basis. First start the dedicated server normally by using Dedicated Server profile. To start server hosting now just configure it on how the profile should look like. If don't want your security measures left weak, you need to install and enable BFD after setting up a firewall for on your dedicated hosting solution. BFD is short for Brute Force Detection, which basically runs a SSH script to check if authenticity has been breached. APF (Advanced Policy Firewall) is one of the best firewalls out there. If you want an easy to use and easy to configurable firewall then APF is the right choice for its policy based iptables. It comes with a unique subset feature tailored for both veterans and novices. Packaged in multiple formats APF is ideal for deployment on any environment. You will need root SSH access to your server. Login to your root user from SSHsu. Extract the packages in your temporary folder. Begin installation by double-clicking the installer. You will receive a confirmation message. Now that installation is done its time to configure the firewall. Let's go over the basics to get your firewall going. This guide does not contain every detail the APF has. If you require additional information check the README file and the configuration file. Use the 'block' list from 'Dshield.org' to acquire a list of networks with suspicious activity. To configure firewall ports, use 'common ingress' and 'common egress' commands in the Cpanel Servers. These commands should be compatible with Ensim Servers too, although that's not guaranteed. Start the firewall after saving all settings. After launch you have commands available for actions like restart, flush, list, status, allow host, deny host etc. After confirming that everything is alright change the DEV. Go to cron and stop the firewall from clearing itself every 5 minutes. It is recommended for this value to be zero after you have checked everything. Restart the APF after saving all the changes made. You can start the firewall at boot time if you want. APF recently added the AntiDOS feature, which can be accessed from logs. There are various things you might like to play around with here including the alerts by email feature. This is definitely one handy feature. You should frequently check the logs to see which hosts have been allowed or denied from your dedicated server. If you need to block hosts you can start doing that now. If you want to block comments as well you should get the latest version of APF. Use the d flag before the IP address to block them. That concludes on how to install an APF firewall for dedicated servers.
|