[HOWTO] APF Firewall Install

[Bushrat]

Just thought I'd update the howto's for APF.

Type ifconfig

Find out if it?s using eth0 or eth1.

Usually its eth0 but if its not, change it in conf.apf or you?ll be completely blocking the server from access

wget http://www.rfxnetworks.com/downloads/apf-current.tar.gz

tar -xvzf apf-current.tar.gz

cd apf*

./install.sh

pico -w /etc/apf/conf.apf

RESV_DNS="1"

All SYSCTL options should be set to 1 EXCEPT for

SYSCTL_OVERFLOW="0"

SYSCTL_SYNCOOKIES="0"

USE_DS="1"

USE_AD="1"

FOR PLESK:

IG_TCP_CPORTS="20,21,22,25,53,80,110,143,443,465,993,995,8443"

IG_UDP_CPORTS="37,53,873"

EGF="1"

EG_TCP_CPORTS="20,21,22,25,53,37,43,80,113,443,465,873"

EG_UDP_CPORTS="53,873"

For CPANEL:

IG_TCP_CPORTS=" 20,21,22,25,53,80,110,143,443,993,995,2082,2083,20

86,2087,2095,2096"

IG_UDP_CPORTS="37,53,873"

EGF="1"

EG_TCP_CPORTS="20,21,22,25,37,53,43,80,113,443,465,873,2087,2089"

EG_UDP_CPORTS="53,873"

apf ?s to start firewall.

If you are not kicked out of SSH and you can type commands after it loads, that means it?s installed correctly.

pico -w /etc/apf/ad/conf.antidos

LP_KLOG="1"

USR_ALERT="1"

USER = ?root?

ARIN_ALERT="1"

pico -w /etc/apf/conf.apf

change DEVM to 0

apf -r

If you have any problems, Pm me.

[dotRoot]

DirectAdmin:

IG_TCP_CPORTS="2222"

Webmin:

IG_TCP_CPORTS="10000"

GameSpy:

IG_TCP_CPORTS="23000"

Also for everyone who run gameservers you need to find out what ports are used for the games and open those UDP ports and also if it uses gamespy to list itself you need UDP port: 23000 open as well.

And one more thing, if you need to open a set of ports such as say: 2400-2900 you can just put: 2400_2900 in the APF config. The _ (underscore) is like a - (dash).

[markwolfe Veteran]

Thanks for the guides!

The new '*nix server' area that was created is a little sparse, as most of our previous guides were workstation/desktop focused.

[Bushrat]

Thanks for the guides!

The new '*nix server' area that was created is a little sparse, as most of our previous guides were workstation/desktop focused.

585302916[/snapback]

No problem

i will be posting more soon :)

[Vinh]

Any one tested this on ubuntu yet?