Softaculous

Topic : how i block 2002 and 2004 from CSF

Posted By: yallaegyfilm on May 17, 2019, 3:15 am

hello, how can i block 2002 and 2004 ports from CSF.

Posted By: Dhanya on May 17, 2019, 5:41 am | Post: 1

Hi,

The ports you have mentioned are for accessing Webuzo on non-SSL protocol(i.e http). Can you provide us with reason you want to block those ports?

Let us know.

Posted By: wolke on May 17, 2019, 6:47 am | Post: 2

The reason is probably BECAUSE it is non-SSL...

Have a look at /etc/csf/csf.conf and look for the section for IPv4. There you can define which ports to allow incoming and outgoing.

Posted By: yallaegyfilm on May 17, 2019, 12:55 pm | Post: 3

Thank you very much guys for your feedback ، I've deleted the incoming and outgoing ports from the IPv4 section but I am still able to access the control panel from the non-ssl ports .

Posted By: wolke on May 17, 2019, 12:58 pm | Post: 4

Make sure csf is not running in testmode.... and that it is really active by issuing

Code
csf -e

See if that issues any Warning messages.
(you should double check that IP4 SSH port (usually 22) is in the list of allowed ports so that you don´t lock yourself out of the host)

Edited by wolke : May 17, 2019, 12:59 pm

Posted By: erile on August 1, 2019, 4:50 pm | Post: 5

Quote From : yallaegyfilm May 17, 2019, 12:55 pm

Thank you very much guys for your feedback ، I've deleted the incoming and outgoing ports from the IPv4 section but I am still able to access the control panel from the non-ssl ports .

Just experienced the same issue some minutes ago: despite ports 2002 and 2004 were removed from TCP_IN, TCP_OUT, TCP6_IN and TCP6_OUT lists in CSF config, I was still able to reach admin and user panels with http:// scheme. Even a "service csf restart" didn't change anything.

I forced to apply this change issuing this command that restart both CSF and LFD in full:

Code
sudo csf -ra

-----------------------
OpenVZ VPS, CentOS 7, Webuzo Premium / Desktop and full-stack dev w/ C, C++, Python, Perl, javascript...