Csf Firewall Urgent Problem

[bhagmal]

Hi,

I like to achieve this. But csf always restore rules after restart. I don't know how i remove default rules.

I need

--------------------------Input Rule-----------------------------------


Allow only my ip to server and all its ports.
block all other requests like tcp icmp udp all. No exception....

-------------------------------------------------------------------------

-------------------------Output Rules-------------------------------------
allow all


Is there anyone here who can solve this problem with cwp csf firewall.
I tried all but it always load default internal rules. That makes it very bad for attackers.

Plz reply asap.

[Geff90j]

Hi

You will need to make changes on the main config file of the csf.

You can also make changes using the iptable direct on the term from your server.

Thank you

[studio4host]

you can also add your custom rules into csf (if needed) but I would recommend using /etc/csf/csf.conf you have almost all needed there

Before CSF Rules
csfpre.sh: Create file /etc/csf/csfpre.sh and add following command.

Code Select Expand

iptables -I INPUT -s 1.2.3.4 -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT

After CSF Rules
csfpost.sh: Create an file /etc/csf/csfpost.sh and add following command.

Code Select Expand

iptables -I INPUT -s 1.2.3.4 -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT

Restart CSF
use this command to restart csf and to check your rules

Code Select Expand

csf -r