How to allow domain in firewall?

Hi Guys,

I have a problem on my server.
I have a file hosting website with S3 Compatible Cloud Object Storage, but when I enabled the firewall the files are not transferred to that cloud storage because the endpoint (domain) is blocked by the firewall.
Where I should white listed the domain for example endpoint.domain.com in the firewall to be able to allow all ingoing and outgoing from that domain ?

Thank you!

Hi,

It should be:

Code: [Select]

/etc/csf/csf.dyndnsAdditionally read and update the section "Global Lists/DYNDNS/Blocklists" of the file:

Code: [Select]

/etc/csf/csf.confaccording to your requirements.

Don't forget to restart CSF when the changes are done.

Hi,

It should be:

Code: [Select]

/etc/csf/csf.dyndnsAdditionally read and update the section "Global Lists/DYNDNS/Blocklists" of the file:

Code: [Select]

/etc/csf/csf.confaccording to your requirements.

Don't forget to restart CSF when the changes are done.

I am just a f noob, I don't know how to do it.
I read the readme.txt but here it say :

Code: [Select]

# TCP connections inbound to port 22 from Dynamic DNS address
# www.configserver.com (for use in csf.dyndns only)
tcp|in|d=22|s=www.configserver.comI don't get it where I should put it.

Can you give me an example where to add endpoint.domain.com for all the traffic? Pleasee

Just add the domain name with www and without into the file csf.dyndns one by line:

Code: [Select]

www.configserver.com
configserver.com
extra.configserver.com

this will allow all traffic (incoming/outgoing, tcp/udp, all ports) to/from the hosts www.configserver.com,configserver.com, extra.configserver.com.

If the hosts from the file change ip periodically then change the line:

Code: [Select]

DYNDNS = "0"to something like:

Code: [Select]

DYNDNS = "300"(set your own value) in the file csf.conf. It instructs csf to check and whitelist the actual IP addresses of the hosts listed in csf.dyndns every 300 seconds.