Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am running Centos 5.5.

Before start cpanel installation, the installation guide says to disable firewall and selinux, so I did it.

Now cpanel installed, up and running. Should I turn iptables & selinux on again? Or cpanel has own security tools so that my system no longer needs iptables/selinux?

Keep it on or stop? Kind of confuse, thank you.

share|improve this question

closed as off-topic by fuero, Jenny D, masegaloeh, mdpc, Katherine Villyard Apr 29 '15 at 2:47

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 3 down vote accepted

cPanel will not work properly if you turned on SELINUX because of SELINUX contexts.

You need to turn on IPtables.

But it will be a good idea to manage IPtables using CSF firewall, which is front end for IPtables.

You can install CSF using following:

yum -y install perl-libwww-perl && \
wget http://www.configserver.com/free/csf.tgz && \
tar -xzf csf.tgz && \
cd csf && \
sh install.sh
share|improve this answer
    
That (the SELinux bit) kinda sounds like poor engineering on the part of cPanel. I'm pretty sure that, with a bit of work, it could be made SELinux friendly. – gerryk Apr 1 '11 at 8:39

You can install the firewall CSF, which is the most commonly used firewall along with Cpanel. After installing CSF, a plugin will appear on the WHM.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.