cPanel Firewall Rules after Almalinux 8 elevate upgrade

[PTS21]

Did the elevate upgrade to Almalinux 8 from CentOS 7. The process went smoothly and everything appears to be working as it should.

I have a VPS from GoDaddy that needs Nydus monitoring apps to connect via port 2225. When I went to add that connection in the firewall, I realized that the firewall was off. When I enabled it and viewed all rules, the firewall was basically only allowing SSH. No other rules exists.

I know cPanel has a bunch of ports and services that need to be added to the firewall rules. Is there a tool to do this automatically that will work with Almalinux 8?

 

[cPRex]

Hey there!

You can find details about the /usr/local/cpanel/scripts/configure_firewall_for_cpanel script, specifically for AlmaLinux 8, here:

How to Configure Your Firewall for cPanel & WHM Services | cPanel & WHM Documentation

This document lists the ports that cPanel & WHM uses, and which services use each of these ports, to allow you to better configure your firewall.

docs.cpanel.net

 

[PTS21]

Thanks, that did the trick. I figured I had to run /usr/local/cpanel/scripts/configure_firewall_for_cpanel but wasn't 100% positive because of the way it was worded. It mentions clearing the iptables utility but nothing about building out the cPanel firewall rules -- which it did.

The /usr/local/cpanel/scripts/configure_firewall_for_cpanel script clears all existing rule entries from your server’s iptables utility. If you use custom rules for your firewall, export those rules before you run the script and then re-add them afterward.