Portal Home > Knowledgebase > Articles Database > Installing CSF in openvz hardware node

Installing CSF in openvz hardware node

Posted by kselva, 03-09-2010, 11:29 AM
I have installed CSF firewall in openvz hardware / main node . When i start the csf the vps inside the node not accessable ( even not pinging ) . how to enable this so that when csf is started in main node the vps are also accessable

Posted by Russ Foster, 03-09-2010, 11:33 AM
I would strongly suggest crafiting manual firewall rule sets for the main node and then CSF individually on each VPS

Posted by -Edward-, 03-09-2010, 01:04 PM
If you are determined to use CSF on your node, then tell it to only work for the IP that the main node is on and ignore all the ip's that are for VPS's.

Posted by Hostwaresupport, 03-09-2010, 01:26 PM
I would suggest you to remove csf from hardware node. It have been seen many times that installing csf on main node blocks all traffic for vps's. You can configure iptables for node and install csf on individual vps as suggested by Rus Foster.

Posted by kselva, 03-10-2010, 12:01 AM
Thank you for suggestion . Can you tell me how to do this in CSF ?

Posted by -Edward-, 03-10-2010, 04:55 AM
Add your network settings to these sections: You can find out what IP is assigned to what eth by typing: Normally you would want to firewall eth0 and then eth0:1, eth0:2, eth0:3 would be added to your skip list. Hope that helps! (o:

Posted by kselva, 03-10-2010, 05:17 AM
ServerWizard This doesn't work for me Any other suggestions or help...

Posted by -Edward-, 03-10-2010, 06:40 AM
whats the output of iptables -L (you are probably best creating a custom ruleset to be honest but it is possible to get it running with CSF)

Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
Outsourcing Support (Views: 326)
mod_security issues (Views: 296)