Virtuozzo Firewall Settings

[airoid]

Does anyone know what the recommended settings on the new Virtuozzo version firewall? Should I just use the normal settings or not have it enabled at all?

EDIT: WOW!! I enabled the normal firewall thinking I could just disable it when I was through but there is no option to shut it off! It, by default, disabled FTP access, secure web access, and cPanel access isn't even an option (only plesk). I quickly changed the firewall setting to "Advanced firewall mode with default policy Accept" and this seemed to fix the problem.

[sdjl]

Yeah, i couldn't find a way to turn it off after "playing" with it
Mine didn't disable access to any of those services by default though. It has them all as accept..

David

Hey guys i'm running mine with default policy to DROP, here are my rules

Input


and Output


Need to add Cpanel Change my Directadmin rule to your port

wow thanks, this one really save me

[Fred]

what is better... apf or the virtuozzo firewall ??

[airoid]

I've got them both on.

[charles]

I do not recommend running them both. Turn apf off if you want to use the one in the power panel.

I would argue that apf is better as it has bfd working with it as well.

charles

[airoid]

How can I turn off the Virtuozzo one?

Actually I would disable the port filtering in APF and just use the client deny rules that way you get the best of both worlds with Virtuozzo doing the heavy work with APF backing it up with deny rules for bad ip's...

It all does depend on resource loads, IE what takes the resource hit for the Virtuozzo firewall filtering

[charles]

Originally Posted by airoid

How can I turn off the Virtuozzo one?

You can't actually turn it off, but you can remove all rules and make the default be accept, and then restart apf.