Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Should I disable iptables when I'm using csf ? any help appreciated.

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

Anyway, you will be using iptables as it is the firewall implementation under Linux. It will be just a wrapper or another interface.

share|improve this answer
    
thanks, so if I disable iptables, will csf still work correctly ? –  Semi May 13 '12 at 8:22
    
@Semi: I am not sure, but if csf uses its own scripts and config files it should work. I think you don't need to disable iptables. Just leave it to csf. –  Khaled May 13 '12 at 8:25
    
really thanks for your help. –  Semi May 13 '12 at 8:27
add comment

CSF relies on iptables. From what looks to be the homepage, assuming I have the right product,

This suite of scripts provides:

Straight-forward SPI iptables firewall script

Like most Linux 'firewalls' it's just a wrapper, as Khaled said, which writes the iptables rules for you, although CSF then appears to provide additionally checking and traffic analysis.

So, the answer is no, you should not disable iptables.

share|improve this answer
    
thanks, but when I did "service iptables stop" csf still works fine. and there is a tut on the net that turns iptables off. as csf is based on iptables but I'm afraid of these two firewalls rules compatibly. coolestguyplanettech.com/… –  Semi May 13 '12 at 8:46
    
iptables functionality in the kernel and an iptables service are not the same thing. I assume the iptables service is just a basic script which loads an iptables config at boot. In summary, your question isn't clear enough. –  EightBitTony May 13 '12 at 12:07
    
thanks man, you're right –  Semi May 13 '12 at 17:26
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.