ConfigServer Security & Firewall (CSF)<\/strong>\u00a0is a stateful packet inspection\u00a0firewall (SPI)<\/strong>, login\/intrusion detection, and\u00a0security application for Linux servers<\/strong>. It is a very popular security suite, but isn’t officially supported yet on CentOS 7.<\/p>\n

CentOS 7<\/strong>\u00a0uses firewalld rather than iptables. A quick internet search will show that many faithful CentOS users find firewalld far too complicated for their needs and are reverting back to iptables. Iptables was the standard firewall for\u00a0CentOS 5 and 6.<\/strong><\/p>\n

This guide shows you how to disable firewalld, install IP tables,\u00a0CSF dependencies, and CSF.<\/strong><\/p>\n

Install CSF<\/strong><\/h3>\n

Stop and disable firewalld.<\/strong><\/p>\n

   systemctl disable firewalld\r\n   systemctl stop firewalld\r\n<\/code><\/pre>\n
Install iptables.<\/strong><\/p>\n
   yum -y install iptables-services\r\n<\/code><\/pre>\n
Create files needed by iptables.<\/strong><\/p>\n
  touch \/etc\/sysconfig\/iptables\r\n  touch \/etc\/sysconfig\/iptables6\r\n<\/code><\/pre>\n
Start iptables.<\/strong><\/p>\n
  systemctl start iptables\r\n  systemctl start ip6tables\r\n<\/code><\/pre>\n
Enable iptables at boot.<\/strong><\/p>\n
  systemctl enable iptables\r\n  systemctl enable ip6tables\r\n<\/code><\/pre>\n
Install the CSF dependencies.<\/strong><\/p>\n
  yum -y install wget perl unzip net-tools perl-libwww-perl perl-LWP-Protocol-https perl-GDGraph -y\r\n<\/code><\/pre>\n
Download and launch the CSF installer.<\/strong><\/p>\n
  cd \/opt\r\n  wget https:\/\/download.configserver.com\/csf.tgz\r\n  tar -xzf csf.tgz\r\n  cd csf\r\n  sh install.sh\r\n<\/code><\/pre>\n
Remove the installation files.<\/strong><\/p>\n
 rm -rf \/opt\/csf\r\n rm \/opt\/csf.tgz \r\n<\/code><\/pre>\n
(Optional) Webmin integration<\/strong><\/h3>\n
If you use Webmin, then you can install the CSF Webmin module.<\/p>\n
Login to Webmin and navigate to the following page.<\/strong><\/p>\n
Webmin > Webmin Configuration > Webmin Modules >\r\n<\/code><\/pre>\n
Click “From local file” and insert the following.<\/strong><\/p>\n
  \/usr\/local\/csf\/csfwebmin.tgz > \r\n<\/code><\/pre>\n
Install the module.<\/strong><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","format":"standard","manualknowledgebasecat":[229,231,245],"manual_kb_tag":[355],"_links":{"self":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2562"}],"collection":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/comments?post=2562"}],"version-history":[{"count":1,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2562\/revisions"}],"predecessor-version":[{"id":2573,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2562\/revisions\/2573"}],"wp:attachment":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/media?parent=2562"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manualknowledgebasecat?post=2562"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb_tag?post=2562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}