Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am running Centos 5.5.

Before start cpanel installation, the installation guide says to disable firewall and selinux, so I did it.

Now cpanel installed, up and running. Should I turn iptables & selinux on again? Or cpanel has own security tools so that my system no longer needs iptables/selinux?

Keep it on or stop? Kind of confuse, thank you.

share|improve this question

2 Answers 2

up vote 3 down vote accepted

cPanel will not work properly if you turned on SELINUX because of SELINUX contexts.

You need to turn on IPtables.

But it will be a good idea to manage IPtables using CSF firewall, which is front end for IPtables.

You can install CSF using following:

yum -y install perl-libwww-perl && \
wget http://www.configserver.com/free/csf.tgz && \
tar -xzf csf.tgz && \
cd csf && \
sh install.sh
share|improve this answer
    
That (the SELinux bit) kinda sounds like poor engineering on the part of cPanel. I'm pretty sure that, with a bit of work, it could be made SELinux friendly. –  gerryk Apr 1 '11 at 8:39

You can install the firewall CSF, which is the most commonly used firewall along with Cpanel. After installing CSF, a plugin will appear on the WHM.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.