I am running Centos 5.5.

Before start cpanel installation, the installation guide says to disable firewall and selinux, so I did it.

Now cpanel installed, up and running. Should I turn iptables & selinux on again? Or cpanel has own security tools so that my system no longer needs iptables/selinux?

Keep it on or stop? Kind of confuse, thank you.

closed as off-topic by fuero, Jenny D, masegaloeh, mdpc, Katherine Villyard Apr 29 '15 at 2:47

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.


cPanel will not work properly if you turned on SELINUX because of SELINUX contexts.

You need to turn on IPtables.

But it will be a good idea to manage IPtables using CSF firewall, which is front end for IPtables.

You can install CSF using following:

yum -y install perl-libwww-perl && \
wget http://www.configserver.com/free/csf.tgz && \
tar -xzf csf.tgz && \
cd csf && \
sh install.sh
  • That (the SELinux bit) kinda sounds like poor engineering on the part of cPanel. I'm pretty sure that, with a bit of work, it could be made SELinux friendly. – gerryk Apr 1 '11 at 8:39

You can install the firewall CSF, which is the most commonly used firewall along with Cpanel. After installing CSF, a plugin will appear on the WHM.

Not the answer you're looking for? Browse other questions tagged or ask your own question.