Server firewall management
Manage the firewall on every server from one screen, whatever runs it: CSF (ConfigServer Firewall), Plesk Firewall, firewalld or ufw. The panel reads the engine from the server and works through it. You add rules, edit IP lists and block countries on CSF in one place, instead of learning a different command set on each machine.
- Topic
- E · Security
- Order
- 02 / 05
- Points
- 06
- Panel support
- 4 / 4 panels
- 01Engine read from servercsf means CSF+LFD, plesk-firewall means Plesk Firewall; otherwise firewalld or ufw depending on the OS.
- 02Only the engine’s fieldsCountry blocking only on CSF, zones only on firewalld; a field the engine lacks is never drawn.
- 03Validated rulesA port is a single value or a 30000:35000 range; a source is IPv4, CIDR or any. Both are checked.
- 04Panel rules stayThe panel would write them back. The same port, protocol, direction and source can’t be added twice.
- 05Turning off is confirmedOnce off, the firewall service in the server profile reads “down” too.
What it does.
Opening a port takes a single number or a range, and the source can be an IP or a CIDR block. The panel checks both before it saves anything. The allow, deny and ignore lists take an expiry, so letting one IP in for a day is a single entry. Turning the firewall off asks for a separate confirmation. The panel’s own rules can’t be deleted, because it would only write them back.
You don’t choose the engine. It comes from the server’s service list: csf means CSF+LFD, plesk-firewall means Plesk Firewall, and otherwise it is firewalld or ufw depending on the OS.
Fields the engine lacks are never shown: country blocking only on CSF, zones only on firewalld, test mode only as a CSF flag.
A port can be one value or a range such as 30000:35000. A source can be IPv4, CIDR or “any”. Both are validated.
Duplicate rules (same port, protocol, direction and source) are refused. Panel-managed rules can’t be deleted, since the panel would write them back.
Three IP lists: allow, deny and ignore. One IP can’t be in allow and deny at once, and timed entries are supported.
Turning the firewall off completely needs a separate confirmation, and the firewall service in the server profile then reads “down” too.
Which panels support it?
Capability Firewall rules
- yesManaged from the panel
- yesManaged from the panel
- yesManaged from the panel
- No panelyesManaged from the panel
Servers without a control panel have no account, reseller or mailbox management, because those come from the panel itself. Firewall, DNS, services and the terminal work over SSH. See the full table
Security
From the firewall to SSH keys, read per server.
- E.01Details Server security centreRun a server security audit across the whole fleet without building the checklist by hand. One table shows the firewall, login protection, WAF, malware scanning and two-factor state of every server. Anything missing becomes a finding with the server’s name on it, and it closes itself once you fix it.
- E.02This page Server firewall managementManage the firewall on every server from one screen, whatever runs it: CSF (ConfigServer Firewall), Plesk Firewall, firewalld or ufw. The panel reads the engine from the server and works through it. You add rules, edit IP lists and block countries on CSF in one place, instead of learning a different command set on each machine.
- E.03Details Brute force protectionWatch failed login attempts and blocked IPs on every server from here, and unblock an IP when a customer locks themselves out. The screen follows the tool your panel already uses: cPHulk on cPanel/WHM, Fail2Ban jails on Plesk, Brute Force Monitor on DirectAdmin. Thresholds and the allow list sit on the same page.
- E.04Details WAF and malware scanner statusSee which WAF rule set and which malware scanner runs on each server: Imunify360, ModSecurity with OWASP CRS, Atomic Basic or ClamAV. A scanner that is installed but stopped shows up as a finding, and so does one that was never installed. For now the screen reports state; rule editing and manual scans are still being built.
- E.05Details Root password and SSH keysChange the root password from the panel without the password ever being stored. You see where it is kept, how many days ago it changed and who changed it. The sshd settings, including PermitRootLogin, password login and the SSH port, sit on the same page as the authorised SSH keys.
Connect your first server today.
Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.
No setup fee · Cancel anytime · EU-hosted