[ZanGetsu]

Hello, in the following tutorial we will see the installation of ConfigServer Security & Firewall (CSF) + Webmin to have a web administration of our csf server and our csf firewall, well I have currently used this firewall several times and it has worked super well, I have achieved configure it in such a way that blocks ips per port scan and well it all depends on how we configure it and the level of security we need, now we go with the installation:

Well proceed to download the package:

Code:

#wget https://download.configserver.com/csf.tgz

Extract the file:

Code:

# tar xfz csf.tgz

Go to the extracted directory:

Code:

cd csf

and install:

Code:

sh install.sh

After this if everything is correct, we will have installed our csf in the system, is to begin to configure all aspects in the following file: vim /etc/csf/csf.conf.

The first thing we should change is the testing mode:

Code:

TESTING = "1" leave like this TESTING = "0"

and good to configure everything else as we want, after this we can restart our firewall with csf -r, to block ips manually we can do it with:

Code:

csf -d ip (example csf -d 192.564.232.234

To add an ip to allowed we will do it with

Code:

csf -a ip (csf -a 192.564.232.234)

Download the package:

Code:

wget http://prdownloads.sourceforge.net/webadmin/webmin-1.660-1.noarch.rpm

We install:

Code:

rpm -U webmin-1.660-1.noarch.rpm

Well the first thing we must do is open our port 10000, to access via web, example: 127.0.0.1:10000 , where the localhost would be our ip publishes,

Well we entered webmin and we log in with our root data, the first thing we will see is the webmin interface:

Go to Webmin> Webmin Configuration and then
Webmin Modules

In From local file we will put the following:
/etc/csf/csfwebmin.tgz

We will have access to csf in:

[-]
System
Bootup and Shutdown
Change Passwords
ConfigServer Security & Firewall

In the ConfigServer Security & Firewall area

Well from there we can manage the lock and unlock of ips,
manage the settings, the level of security of the firewall, among other things,
that would be all, greetings!

[Infinity]

Actually pretty helpful for my scenario, thank you.

[mothered]

Your tutorials keep getting better and better.

I don't believe I've come across a guide as detailed, yet simplistic as this.
Appreciated.