Hi,
I would suggest you to use CSF firewall. It's easy to install and to configure for Virtualizor.
Instructions on how to install are here : http://configserver.com/cp/csf.html
Once it's installed in /etc/csf/csf.conf , make sure you have this :
Code # Allow incoming TCP ports
TCP_IN = "5900:7000 "
# Allow outgoing TCP ports
TCP_OUT = "25,80,443"
// if you have IPV6 :
Code
# Allow outgoing TCP ports
TCP6_IN = "5900:7000
"
# Allow outgoing TCP ports
TCP6_OUT = "25,80,443"
Now, in /etc/csf/csf.allow just add your ip address you need to authorize.
then, to let virtualizor work with csf, just create this file :
/etc/csf/csfpost.sh
and add this line :
Code /sbin/iptables -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT
It will be much easier for you to manage your firewall this way, with CSF  You'll get much better rules.
If you enable the CSF UI, you'll also get a web interface to manage your firewall. However, it's more secure if you only use the command line to configure it.
p.s.: why should you be using something else than https for transactions on this server? I recommend to close the port 4082, and never use it ;)
hope that help
|
September 27, 2014, 2:23 am | Post: 2
