Firewall

[Maximus]

What firewall are prefered by everyone out here to harden there server?

[NSWKim]

Hi,

We find that generally APF is easiest and fastest to throw onto a server but in the grand scheme it becomes more of a nuisance than a help. If you going to use a firewall I would suggest just using egress only so that in the case of some sort of outbound flood attack your bandwidth provider doesn't yank your server.

[SergioC]

If you use CPanel, then CSF is the best FireWall I have ever used. You can install it yourself, very easily and the best of all is that you can manage your firewall from WHM. Visit www.configserver.com for more info.

[XSI-Larry]

Well, the question would be are you thinking hardware or software? We use Cisco equipment as firewalls on a hardware level.

If we were to put a software one on it would be APF.

[flashweb]

On Linux APF, on windows we use the firewall available with windows.

[rviradia]

APF on server with juniper/netscreen on network level

[Choucism]

We've been using Zyxell... their Zywall 5UTM is a pretty good option. Lately however, we've been looking into a partnership with Sonicwall. Apparently they heavily reward their resellers and get us a lot of savings, which we can pass to the customer obviously. They seem to be a pretty solid company... does anyone have any hands-on experience with them?

[yahost]

Was going through the firewalls section and am beginning to wonder if a firewall is really ness?

think about it... If you do not have a firewall a PC asking Server/other PC for info that does not have the service running will not return anything most likley a time out or can not connect error.

Well this brings me to another term. some sites install spyware on your PC. now if you had a firewall you MAY catch this or may not and disallow it.

In my oppionion a good firewall should detect all your services running and can should automatically allow these connections. or at least ask you.

and a server running a firewall runs only services that are setup preventing any other option not to connect. in this reguards then why should say an ISP even use a firewall?

[vselvara]

I've been using FreeBSD Bridged firewalls (ipfw) for a while and have not had any problems. The FreeBSD Handbook has the setup very well documented.

[rayAH]

I also suggest FreeBSD Bridged firewalls.

[Dedihosting]

Guys trust me with this one dont use freeware to protect your server worst mistake you can make,

[HostLayer]

I would go with APF. I use that and it works well.