hoctinhoc

1. Cài đặt CSF

wget http://download.configserver.com/csf.tgz
tar -xzf csf.tgz
cd csf
sh install.sh
perl /usr/local/csf/bin/csftest.pl

2. Cấu hình

vi /etc/csf/csf

* Chuyển chế độ Test qua chế độ Production

TESTING = "0"

* Mở Port

TCP_IN = "80,443,50022,60022,8069,22"

TCP_OUT = "80,443,50022,60022,8069,22"

* Chặn quốc gia truy cập

CC_DENY = "CN,PK,NG,BD,IR,KZ,BY"


Hoặc chặn tất cả quốc gia trừ VN


CC_DENY = "AF,AL,DZ,AS,AD,AO,AI,AQ,AG,AR,AM,AW,AU,AT,AZ,BS,B H,BD,BB,BY,BE,BZ,BJ,BM,BT,BO,BA,BW,BV,BR,IO,BN,BG, BF,BI,KH,CM,CA,CV,KY,CF,TD,CL,CN,CX,CC,CO,KM,CG,CD ,CK,CR,CI,HR,CU,CY,CZ,DK,DJ,DM,DO,TP,EC,EG,SV,GQ,E R,EE,ET,FK,FO,FJ,FI,FR,FX,GF,PF,TF,GA,GM,GE,DE,GH, GI,GR,GL,GD,GP,GU,GT,GN,GW,GY,HT,HM,VA,HN,HK,HU,IS ,IN,ID,IR,IQ,IE,IL,IT,JM,JP,JO,KZ,KE,KI,KP,KR,KW,K G,LA,LV,LB,LS,LR,LY,LI,LT,LU,MO,MK,MG,MW,MY,MV,ML, MT,MH,MQ,MR,MU,YT,MX,FM,MD,MC,MN,MS,MA,MZ,MM,NA,NR ,NP,NL,AN,NC,NZ,NI,NE,NG,NU,NF,MP,NO,OM,PK,PW,PA,P G,PY,PE,PH,PN,PL,PT,PR,QA,RE,RO,RU,RW,KN,LC,VC,WS, SM,ST,SA,SN,SC,SL,SG,SK,SI,SB,SO,ZA,GS,ES,LK,SH,PM ,SD,SR,SJ,SZ,SE,CH,SY,TW,TJ,TZ,TH,TG,TK,TO,TT,TN,T R,TM,TC,TV,UG,UA,AE,GB,US,UM,UY,UZ,VU,VE,VG,VI,WF, EH,YE,ZM,ZW"


3. Restart dịch vụ CSF

csf -ra


Tham khảo:


https://www.liquidweb.com/kb/install...ll-csf-ubuntu/


https://www.2daygeek.com/how-to-bloc...-csf-firewall/


Country List: https://billing.dotblock.com/knowled...Code-List.html