I have a server with debian 6 and installed xen with two PV linux on that. these two PV will running two different website but i want only port 80 be open on them.
so, i want install csf only on dom0 for all of them.
but when i confige csf on dom0, that works only for dom0. for example only close ssh port on dom0 not other domains.
i used ETH_DEVICE with different switch such as (bridged 3 ip on eth0, eth0:0, eth0:1) :
ETH_DEVICE = "eth+"
with this dom0 will block all connection also connection to ip that are listed on /etc/csf/csf.allow or csf.ignore
or this (i used br0 for dom0 and br1,br2 for domu) :
ETH_DEVICE = "br+"
any thing can be helpful :)