ConfigServer Security & Firewall - csf v4.76

Saokim999

                               
Đăng nhập/Đăng ký mở rộng

Supported and Tested Virtual Servers
	**Virtuozzo	**OpenVZ
	VMware	UML
	Xen	MS Virtual Server

Supported and Tested Operating Systems
	RedHat v7.3, v8.0, v9.0	*openSUSE v10, v11
	RedHat Enterprise v3, v4, v5 (32/64 bit)	*Debian v3.1, v4.0, v5.0
	CentOS v3, v4, v5  (32/64 bit)	*Ubuntu v6.06 LTS, v8.10
	Fedora Core v1 to v11(32/64 bit)	*Mandriva 2009
	*Gentoo	*Slackware v12.2

This suite of scripts provides:
               

• Straight-forward SPI iptables firewall script
• Daemon process that checks for login authentication failures for:
  • Courier imap, Dovecot, uw-imap, Kerio
  • openSSH
  • cPanel, WHM, Webmail (cPanel servers only)
  • Pure-pftd, vsftpd, Proftpd
  • Password protected web pages (htpasswd)
  • Mod_security failures (v1 and v2)
  • Suhosin failures
  • Exim SMTP AUTH
  • Custom login failures with separate log file and regular expression matching
                      
• POP3/IMAP login tracking to enforce logins per hour
• SSH login notification
• SU login notification
• Excessive connection blocking
• UI Integration for cPanel, DirectAdmin and Webmin
• Easy upgrade between versions from within cPanel/WHM, DirectAdmin or  Webmin
• Easy upgrade between versions from shell
• Pre-configured to work on a cPanel server with all the standard cPanel ports open
• Pre-configured to work on a DirectAdmin server with all the standard DirectAdmin ports open
• Auto-configures the SSH port if it's non-standard on installation
• Block traffic on unused server IP addresses - helps reduce the risk to your server
• Alert when end-user scripts sending excessive emails per hour - for identifying spamming scripts
• Suspicious process reporting - reports potential exploits running on the server
• Excessive  user processes reporting
• Excessive  user process usage reporting and optional termination
• Suspicious file reporting - reports potential exploit files in /tmp and similar directories
• Directory and file watching - reports if a watched directory or a file changes
• Block traffic on the DShield Block List and the Spamhaus DROP List
• BOGON packet protection
• Pre-configured settings for Low, Medium or High firewall security (cPanel servers only)
• Works with multiple ethernet devices
• Server Security Check - Performs a basic security and settings check on the server (via cPanel/DirectAdmin/Webmin UI)
• Allow Dynamic        DNS IP addresses - always allow  your IP address even if it changes whenever you connect to the internet
• Alert sent if server load average remains high for a specified length of time
• mod_security log reporting (if installed)
• Email relay tracking - tracks all email sent through the server  and issues alerts for excessive usage (cPanel servers only)
• IDS (Intrusion Detection System) - the last line of detection alerts you to changes to system and application binaries
• SYN Flood protection
• Ping of death protection
• Port Scan tracking and blocking
• Permanent and Temporary (with TTL) IP blocking
• Exploit checks
• Accountmodification tracking - sends alerts if an account entry is modified,e.g. if the password is changed or the login shell
• Shared syslog aware
• New in v4: Messenger Service - Allows you to redirect connection requests fromblocked IP addresses to preconfigured text and html pages to inform thevisitor that they have been blocked in the firewall. This can beparticularly useful for those with a large user base and help processsupport requests more efficiently
• New in v4:  Country Code blocking - Allows you to deny or allow access by ISO Country Code
• New in v4:  Port Flooding Detection - Per IP, per Port connection flooding detection and mitigation to help block DOS attacks
• New in v4: DirectAdmin UI integration
• New in v4: Updated Webmin UI integration
• New in v4: WHM root access notification (cPanel servers only)
• ...lots more!

                Thereason we have developed this suite is that we have found over theyears of providing server services that many of the tools available forthe task are either over-complex, not user friendly, or simply aren'tas effective as they could be.
                ConfigServer Firewall (csf)
                We have developed an SPI iptables firewall that is comprehensive, straight-forward, easy and flexible to configure
                Download
                The latest version of csf can be downloaded here: csf.tgz

Saokim999

How to Install CFS

Installation is quite straightforward:
Go to SSH
Type command:

1. rm -fv csf.tgz
   
2. wget http://www.configserver.com/free/csf.tgz
   
3. tar -xzf csf.tgz
   
4. cd csf
   
5. sh install.sh

Sao chép mã

Next, test whether you have the required iptables modules:

1. perl /etc/csf/csftest.pl

Sao chép mã

Don't worry if you cannot run all the features, so long as the script doesn't
report any FATAL errors

You should not run any other iptables firewall configuration script. For
example, if you previously used APF+BFD you can remove the combination (which
you will need to do if you have them installed otherwise they will conflict
horribly):

1. sh /etc/csf/remove_apf_bfd.sh

Sao chép mã

That's it. You can then configure csf and lfd by edit the files
directly in /etc/csf/*, or on cPanel servers use the WHM UI

csf installation for cPanel is preconfigured to work on a cPanel server with all
the standard cPanel ports open.

csf installation for DirectAdmin is preconfigured to work on a DirectAdmin
server with all the standard DirectAdmin ports open.

csf auto-configures your SSH port on installation where it's running on a non-
standard port.

csf auto-whitelists your connected IP address where possible on installation.

You should ensure that kernel logging daemon (klogd) is enabled. Typically, VPS
servers have this disabled and you should check /etc/init.d/syslog and make
sure that any klogd lines are not commented out. If you change the file,
remember to restart syslog.

See the readme.txt file for more information.

Webmin Module Installation/Upgrade
==================================

1. 
   
2. To install or upgrade the csf webmin module:
   
3. 
   
4. Install csf as above
   
5. Install the csf webmin module in:
   
6.   Webmin > Webmin Configuration > Webmin Modules >
   
7.   From local file > /etc/csf/csfwebmin.tgz > Install Module

Sao chép mã

Uninstallation
==============
Removing csf and lfd is even more simple:

On cPanel servers:

cd /etc/csf
sh uninstall.sh

On DirectAdmin servers:

cd /etc/csf
sh uninstall.directadmin.sh

On generic linux servers:

cd /etc/csf
sh uninstall.generic.sh

RuBiVn

Anh saokim ơi. Anh có thể dịch hết lại bằng Tiếng Việt k. Em đọc tiếng anh đã thấy nản rồi

Heo Còi

Dành cho VPS server linux
vào ssh gõ lệnh

1. rm -fv csf.tgz
   
2. wget http://www.configserver.com/free/csf.tgz
   
3. tar -xzf csf.tgz
   
4. cd csf
   
5. sh install.sh

Sao chép mã

Mỗi dòng là một lệnh nhé, lần lượt từ trên xuống

Như thế là cài xong rồi
gõ tiếp

1. perl /etc/csf/csftest.pl

Sao chép mã

để test
Gỡ thì vào control panel del đi cũng đc. trong phần plugin