Shulou(Shulou.com)06/02 Report--

ConfigServer Security & Firewall is a set of free firewall of linux system developed abroad. it works based on iptables and can effectively relieve the pressure on the server. it has the functions of automatically shielding brute force cracking password IP, managing open ports, immune lightweight DDoS and CC, etc., at the same time, it is also very easy to install and use, and there is a graphical interface in our commonly used DA and CP panels. Also support individual ordinary users to install and use in the LNMP environment, the following will introduce how to install CSF firewall in CentOS system.

Perform the following steps to install:

Wget https://download.configserver.com/csf.tgztar zxvf csf.tgzcd csfsh install.sh

After execution, your CSF is installed.

Configure CSF

CSF profile address: / etc/csf/csf.conf whitelist: / etc/csf/csf.allow blacklist: / etc/csf/csf.deny

The main configuration information, in csf.conf, contains a very detailed explanation, you can study and set up.

The two modified settings recommended by individuals can effectively reduce the pressure on the server caused by malicious CC***.

CONNLIMIT = "22 ~ (th), 5 ~ (th) 80 ~ (th), 20" PORTFLOOD = "22 ~ (th), t _ (cpp) ~ (th), 5 ~ (th), 300 ~ (th), 80 ~ (th), ~ (th)

After each setting is completed, change TESTING = "1" to TESTING = "0", that is, turn off the test mode.

Execute csf-r to restart the CSF service for the settings to take effect.

A few other useful commands

Csf-x disable CSFcsf-e enable CSFcsf-l to view CSF status

For detailed configuration information, you can consult our technicians.

Source of this article: http://www.thinkxen.com/help/1.html

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.