MyLiteratureTechLife.COM » Firewalls

Iptables firewall on Debian

shk — Fri, 29 Jul 2011 15:54:42 +0000

Iptables provide filtering, NAT and other packet mangling. Viewing current configuration iptables -L Output will be like Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Storing iptables rules in a file nano -w /etc/iptables.test.rules [...]

Iptables firewall on Debian is a post from: MyLiteratureTechLife.COM

Uninstalling apf firewall

shk — Mon, 27 Jun 2011 14:19:34 +0000

All you need is to run following commands service iptables stop chkconfig apf off /bin/rm -rfv /etc/apf /bin/rm -fv /etc/cron.daily/fw /bin/rm -fv /etc/init.d/apf iptables -L -n Uninstalling apf firewall is a post from: MyLiteratureTechLife.COM

Uninstalling apf firewall is a post from: MyLiteratureTechLife.COM

APF: unable to load iptables module (ip_tables), aborting

shk — Mon, 27 Jun 2011 13:43:15 +0000

If you are getting error on apf unable to load iptables module (ip_tables), aborting It means, your kernel is compiled with iptables statically instead of as a module, and you will need to change this in the /etc/apf/conf.apf MONOKERN="0" Set it to "1" So open /etc/apf/conf.apf file and modify it restart the apf service and [...]

APF: unable to load iptables module (ip_tables), aborting is a post from: MyLiteratureTechLife.COM

Install APF firewall in Linux

shk — Fri, 19 Nov 2010 21:06:48 +0000

firewall is always very important for the security of your system, specially if you are running a web server running very popular websites then firewall is the life of your server. Previously I explained how to install CSF firewall, and here is the tutorial for APF which is another great firewall available. cd /usr/local/src/ [...]

Install APF firewall in Linux is a post from: MyLiteratureTechLife.COM

Ports to configure in firewall for Plesk

shk — Sun, 07 Nov 2010 20:22:04 +0000

Previously I explained the list of ports to configure in firewall if you are running direct admin in your web servers. Ports to configure in firewall for Directadmin Here is the list of ports which are required to configure if you are running plesk control panel. #20 ftp-data #21 ftp #22 ssh #25 smtp #53 [...]

Ports to configure in firewall for Plesk is a post from: MyLiteratureTechLife.COM

CSF on DirectAdmin

shk — Fri, 22 Oct 2010 21:04:12 +0000

There was a time when I was about to select a firewall for a server which had DirectAdmin installed and I choosed CSF. CSF is one of the best firewall available for hosting servers. Installation of CSF in directAdmin is really easy, just download csf. Extract it and Install it Just a 3 step installation. [...]

CSF on DirectAdmin is a post from: MyLiteratureTechLife.COM

perl error in CSF installation

shk — Fri, 22 Oct 2010 20:51:37 +0000

[root@mailserver csf]# service <a title="csf" href="http://www.myliteraturetechlife.com/enableing-passive-mode-in-ftp-server-with-csf-firewall/">csf</a> status Status of csf:Can't locate LWP/UserAgent.pm in @INC (@INC contains: /usr/local/cpanel /etc/csf /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/5.8.8 .) at /usr/sbin/csf line 3033. BEGIN failed--compilation aborted at /usr/sbin/csf line 3033. The error is because of perl module installation, which is the basic requirement of csf and the [...]

perl error in CSF installation is a post from: MyLiteratureTechLife.COM

ip_conntrack table is full and dropping packets

shk — Fri, 12 Mar 2010 12:00:18 +0000

Last day one of our server had an attack, attack was not so big but still server was unresponsive because of this. After some research I found that this is because of iptables which are being load while handling so much traffic. Then I found a good article on the same issue which you can [...]

ip_conntrack table is full and dropping packets is a post from: MyLiteratureTechLife.COM

Installing & configuring shorewall firewall in Ubuntu/Debian

shk — Fri, 05 Feb 2010 21:19:31 +0000

Shore line firewall known as “Shorewall”, it is a very high level firewall and very easy to install and ocnfigure How to install :- sudo apt-get install shorewall configuring shorewall startup service :- nano /etc/default/shorewall #Now simply change the line below from 0 to 1 startup = 0 to startup = 1 #save, and exit. [...]

Installing & configuring shorewall firewall in Ubuntu/Debian is a post from: MyLiteratureTechLife.COM

Enableing passive mode in FTP server with CSF firewall

shk — Mon, 11 Jan 2010 12:31:08 +0000

Passive mode is always very important for ftp servers, if you are running csf firewall and cannot connect to ftp server then it means that range of passive ports is blocked in firewall. Here are simple steps 1) Add Passive Port range 30000-350000 to your Pureftp or Proftp configuration file i) For Pure FTP open [...]

Enableing passive mode in FTP server with CSF firewall is a post from: MyLiteratureTechLife.COM