Results 1 to 6 of 6

Thread: What is the best firewall for a web server? UFW? APF? Something Else?

  1. #1
    Join Date
    Jan 2012
    Beans
    60

    Question What is the best firewall for a web server? UFW? APF? Something Else?

    Im trying to configure a web server and just want to know what firewall should I install in it? APF? UFW? or something else?

  2. #2
    Join Date
    Sep 2006
    Beans
    7,328
    Distro
    Lubuntu Development Release

    Re: What is the best firewall for a web server? UFW? APF? Something Else?

    UFW and the others are just front-ends for iptables. So you could use either. I gather that UFW is the officially supported front-end so you could go with that unless you want or need extras like rate limiting.

  3. #3
    Join Date
    Jan 2012
    Beans
    60

    Re: What is the best firewall for a web server? UFW? APF? Something Else?

    Quote Originally Posted by Lars Noodén View Post
    UFW and the others are just front-ends for iptables. So you could use either. I gather that UFW is the officially supported front-end so you could go with that unless you want or need extras like rate limiting.
    We can use programs like fail2ban for rate limiting right?

  4. #4
    Join Date
    Jul 2011
    Beans
    3,037
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: What is the best firewall for a web server? UFW? APF? Something Else?

    Quote Originally Posted by THPubs View Post
    We can use programs like fail2ban for rate limiting right?
    You are right:

    https://help.ubuntu.com/community/Fail2ban

  5. #5
    Join Date
    Sep 2006
    Beans
    7,328
    Distro
    Lubuntu Development Release

    rate limiting

    Rate limiting is also built into iptables. So if you work directly with iptables, you don't need extras. It's a little harder to find good documentation on iptables, though, but it is the simplest way to go.

    Code:
    ...
      iptables -A INPUT -p icmp --icmp-type echo-request \
            -m limit --limit 1/s -i eth0 -j ACCEPT
    ...
      iptables  -A INPUT -p TCP --dport 22 -m state --state NEW \
            -m limit --limit 4/minute --limit-burst 5 -j ACCEPT
    ...
      iptables -A INPUT -p TCP -j RETURN

  6. #6
    Join Date
    Aug 2006
    Location
    Somewhere in the hell
    Beans
    294
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: What is the best firewall for a web server? UFW? APF? Something Else?

    Quote Originally Posted by THPubs View Post
    Im trying to configure a web server and just want to know what firewall should I install in it? APF? UFW? or something else?
    I would like to recommend application firewall for web server. However, those are add-ons to the web server.

    If you want a lightweight, fast and secure web server, I would recommend Hiawatha.

    Why I suggest Hiawatha? It is because of her features.

    If you want to install Hiawatha on Ubuntu Server, you can refer to this HOWTO.

    Samiux

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •