|
Post Group: Newbie
Posts: 1
Status:  |
We have been experimenting with the Enduser Firewall for the past 2 weeks.
Today we realized the following scenario which can lead to critical situation if used in production:
1. User creates firewall plan and creates rules
2. User assigns plan to VPS
3. Firewall rules are created on server via command line (NOT PERSISTENT)
4. Rules are also saved in "firewall_plans" DB table
5. If, for any reason, the Virtualizor server must be restarted, all those rules are gone. In order to recover them, i guess you need to edit each VPS > Save.
We use iptables-persistent so we thought of creating a cron job which will automatically save the rules into /etc/iptables/rules.v4 file every 1 minute.
However, this is a tweak which may prevent us from taking this feature into production.
Any suggestions from Virtualizor team ?
|
