Csf Firewall Urgent Problem

Hi,

I like to achieve this. But csf always restore rules after restart. I don't know how i remove default rules.

I need

--------------------------Input Rule-----------------------------------


Allow only my ip to server and all its ports.
block all other requests like tcp icmp udp all. No exception....

-------------------------------------------------------------------------

-------------------------Output Rules-------------------------------------
allow all


Is there anyone here who can solve this problem with cwp csf firewall.
I tried all but it always load default internal rules. That makes it very bad for attackers.

Plz reply asap.


 

Hi

You will need to make changes on the main config file of the csf.

You can also make changes using the iptable direct on the term from your server.

Thank you

you can also add your custom rules into csf (if needed) but I would recommend using /etc/csf/csf.conf you have almost all needed there

Before CSF Rules
csfpre.sh: Create file /etc/csf/csfpre.sh and add following command.

Code: [Select]

iptables -I INPUT -s 1.2.3.4 -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
After CSF Rules
csfpost.sh: Create an file /etc/csf/csfpost.sh and add following command.

Code: [Select]

iptables -I INPUT -s 1.2.3.4 -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
Restart CSF
use this command to restart csf and to check your rules

Code: [Select]

csf -r