Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Feature Requests

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 16th October 2012, 05:34
concept21 concept21 is offline
Senior Member
 
Join Date: Dec 2011
Posts: 128
Thanks: 23
Thanked 11 Times in 9 Posts
Exclamation Removal of Bastille Firewall from ISPConfig3

Bastille Firewall is a legacy software which does not run on Ubuntu 10.04.

Please remove it from future ISPConfig3.

Thanks.
Reply With Quote
Sponsored Links
  #2  
Old 16th October 2012, 08:20
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,567
Thanks: 791
Thanked 4,979 Times in 3,900 Posts
Default

Bastille Firewall runs fine on Ubuntu 10.04.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 19th October 2012, 18:24
concept21 concept21 is offline
Senior Member
 
Join Date: Dec 2011
Posts: 128
Thanks: 23
Thanked 11 Times in 9 Posts
Smile

Man,
Bastille has not been updated for several years. May I suggest you to replace it with CSF??
Reply With Quote
  #4  
Old 19th October 2012, 18:57
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,567
Thanks: 791
Thanked 4,979 Times in 3,900 Posts
Default

Bastille is a iptables firewall script which does everything that we need it for, so it does not matter how often it is updated as it works fine. Beside bastille, ispconfig supports ufw as firewall since 3.0.5.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 27th October 2012, 18:56
tek tek is offline
Junior Member
 
Join Date: Feb 2012
Location: Silicon Valley
Posts: 9
Thanks: 1
Thanked 0 Times in 0 Posts
Send a message via ICQ to tek Send a message via AIM to tek Send a message via Yahoo to tek Send a message via Skype™ to tek
Lightbulb Firewall scripts

I had to remove bastille also from my setup because I needed some NAT - IP masquerading setup plus a fair number of ports to be forwarded. I know there are much easier firewall scripts out there such as ufw but I am actually doing a fair amount of port forwarding and using iscsi and other bits of blackmagic and having had no choice a long time ago I had gone through the pain and suffering to get arno-iptables-firewall setup and configured.

Kind of sucks cause I am always tempted to click on firewall from the backend and I seem to recall at one point I actually did and this broke a nice long list of things as it tried to setup both firewalls to run.

while I do wish arno-iptables-firewall could be configured through there I accept the fact that might be asking for a bit much.

Since you mention ufw being supported now, I am wondering if there is a way perhaps to turn off ispconfig3 from handing it at all? Im gonna hate myself if I end up with yet another way I can shoot myself in the head.
Thanks..
Reply With Quote
  #6  
Old 27th October 2012, 19:42
concept21 concept21 is offline
Senior Member
 
Join Date: Dec 2011
Posts: 128
Thanks: 23
Thanked 11 Times in 9 Posts
Default

If you don't install Bastille, ISpconfig firewall option just does not have any effect on the system's firewall.

Then, you can install your own preferred firewall software. The startup script of Bastille can be manually removed or disabled.
Reply With Quote
  #7  
Old 11th February 2013, 04:18
Parsec Parsec is offline
Member
 
Join Date: Jan 2013
Posts: 66
Thanks: 1
Thanked 9 Times in 8 Posts
Default

Thats what I have done. I am using a simple combination of iptables + ipset + fail2ban (with ban2sql so everything is in a mysql database)
Reply With Quote
  #8  
Old 11th February 2013, 12:58
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,567
Thanks: 791
Thanked 4,979 Times in 3,900 Posts
Default

Quote:
I had to remove bastille also from my setup because I needed some NAT - IP masquerading setup plus a fair number of ports to be forwarded. I know there are much easier firewall scripts out there such as ufw but I am actually doing a fair amount of port forwarding and using iscsi and other bits of blackmagic and having had no choice a long time ago I had gone through the pain and suffering to get arno-iptables-firewall setup and configured.
You did not had to remove it as bastille supports all kind of custom rules. Search the forum for bastille custom and you will find several threads that explain this in detail.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.

Last edited by till; 12th February 2013 at 08:43.
Reply With Quote
  #9  
Old 11th February 2013, 19:08
abdi abdi is offline
Senior Member
 
Join Date: Sep 2012
Posts: 117
Thanks: 0
Thanked 10 Times in 6 Posts
Default

Quote:
Originally Posted by concept21 View Post
Man,
Bastille has not been updated for several years. May I suggest you to replace it with CSF??
+1 on CSF (its really a power-full firewall app)
Reply With Quote
  #10  
Old 19th September 2013, 00:33
FcbInfo FcbInfo is offline
Junior Member
 
Join Date: Sep 2013
Posts: 2
Thanks: 0
Thanked 2 Times in 1 Post
 
Default

Old thread but...

This is the unique reason that i'm not using ispconfig at this time.

CSF <- Just don't try to find something better than this. You can't!

Can you install csf on a server with ispconfig? Yes, you can, but this is not fully integrated with the control panel like it's working on cpanel.

CSF can do, what a hardware firewall don't do!
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Problem on Bastille firewall with CentOS 6.0 and ispconfig 3.0.3.3 themark Installation/Configuration 5 19th October 2011 12:57
Problem with bastille firewall on OVH RPS servers SupuS Installation/Configuration 12 3rd June 2010 16:20
Bastille Firewall problems itsnedkeren General 7 2nd May 2010 22:55
amavis rejects all inbound emails aclhkaclhk Installation/Configuration 5 28th February 2010 04:24
Firewall and ISPCONFIG3 pinguinito General 1 30th April 2009 14:40


All times are GMT +2. The time now is 13:35.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.