Control Web Panel
Security => CSF Firewall => Topic started by: CoriaWeb Hosting on June 01, 2020, 12:26:13 PM
-
Hello!
A major upgrade request.
We believe that "reseller" users should have an option from their own panel to unblock IPS from the firewall.
This would prevent us from getting support tickets to unblock IPS as they would be able to do it themselves.
-
I think that you'd find this to be a core change in how CSF operates and not necessarily for the better. It is much better to determine the cause for the client block and educate the client to prevent it happening.
Example:
- Port scanning setting increased from the default to say, 14. This is a sensible/practical number of simultaneous ports to allow clients to attach to. It allows clients to access services yet prevents malicious attacks on the server.
- Limit (s)FTP connections to 4 per client
- Educate clients not to open control panel, website and FTP at the same time
- Educate clients to not allow their devices (PC,Mac,Ios,Android) to broadcast services
The alternative is cumbersome, along the lines of a sticky bit for the csf executable(s); determining limits for a particular reseller to only alter blocks that pertain to their clients. Remember that a firewall is there to protect the whole of the server.