Control Web Panel

WebPanel => CentOS 9 Problems => Topic started by: Insan3Us on September 14, 2024, 05:11:52 PM

Title: How to allow domain in firewall?
Post by: Insan3Us on September 14, 2024, 05:11:52 PM

Hi Guys,

I have a problem on my server.
I have a file hosting website with S3 Compatible Cloud Object Storage, but when I enabled the firewall the files are not transferred to that cloud storage because the endpoint (domain) is blocked by the firewall.
Where I should white listed the domain for example endpoint.domain.com in the firewall to be able to allow all ingoing and outgoing from that domain ?

Thank you!

Title: Re: How to allow domain in firewall?
Post by: cyberspace on September 14, 2024, 05:42:52 PM

Hi,

It should be:

Code: [Select]

/etc/csf/csf.dyndnsAdditionally read and update the section "Global Lists/DYNDNS/Blocklists" of the file:

Code: [Select]

/etc/csf/csf.confaccording to your requirements.

Don't forget to restart CSF when the changes are done.

Title: Re: How to allow domain in firewall?
Post by: Insan3Us on September 14, 2024, 05:58:21 PM

Quote from: cyberspace on September 14, 2024, 05:42:52 PM

Hi,

It should be:

Code: [Select]

/etc/csf/csf.dyndnsAdditionally read and update the section "Global Lists/DYNDNS/Blocklists" of the file:

Code: [Select]

/etc/csf/csf.confaccording to your requirements.

Don't forget to restart CSF when the changes are done.

I am just a f noob, I don't know how to do it.
I read the readme.txt but here it say :

Code: [Select]

# TCP connections inbound to port 22 from Dynamic DNS address
# www.configserver.com (for use in csf.dyndns only)
tcp|in|d=22|s=www.configserver.comI don't get it where I should put it.

Can you give me an example where to add endpoint.domain.com for all the traffic? Pleasee

Title: Re: How to allow domain in firewall?
Post by: cyberspace on September 14, 2024, 07:12:00 PM

Just add the domain name with www and without into the file csf.dyndns one by line:

Code: [Select]

www.configserver.com
configserver.com
extra.configserver.com

this will allow all traffic (incoming/outgoing, tcp/udp, all ports) to/from the hosts www.configserver.com,configserver.com, extra.configserver.com.

If the hosts from the file change ip periodically then change the line:

Code: [Select]

DYNDNS = "0"to something like:

Code: [Select]

DYNDNS = "300"(set your own value) in the file csf.conf. It instructs csf to check and whitelist the actual IP addresses of the hosts listed in csf.dyndns every 300 seconds.