security risk on system firewall

aaP_ihisham999

Hello,
I used Aapanel on debian 10.
Why show this on security risk?
How to resolved ?

aaPanel_Kern

aaP_ihisham999
Hello, try to execute the following commands to open the relevant ports and open the firewall: Please change according to your actual situation

panelPort=7800
sshPort=22

/sbin/ufw allow 20/tcp
/sbin/ufw allow 21/tcp
/sbin/ufw allow 80/tcp
/sbin/ufw allow 888/tcp
/sbin/ufw allow 39000:40000/tcp
/sbin/ufw allow ${panelPort}/tcp
/sbin/ufw allow ${sshPort}/tcp
/sbin/ufw reload
/sbin/ufw enable
/sbin/ufw status

firewall-cmd --set-default-zone=public >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=20/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=21/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=80/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=${panelPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=${sshPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=39000-40000/tcp >/dev/null 2>&1
systemctl start firewalld
firewall-cmd --reload
systemctl enable firewalld
firewall-cmd --list-all

aaP_ihisham999

error show

aaPanel_Kern

aaP_ihisham999
Hello, can the command of firewall-cmd be executed?

aaP_ihisham999

my server didn't have UFW.

-bash: ufw: command not found

Benny

I also have this problem too. Any solution?

aaP_ihisham999

Benny No brother

aaPanel_Kern

Benny
Hi, did the above command work? Is the firewall activated?

aaP_ihisham999

aaPanel_Kern
Hello,
The above command didn't work.

I used Aapanel on debian 10.

SYS Firewall plugin is not installed in aaPanel.

ufw Firewall not activated.

$ sudo ufw status
$ -bash: ufw: command not found

my server didn't have UFW.

Please help brother

aaPanel_Kern

aaP_ihisham999

panelPort=7800
sshPort=22

firewall-cmd --set-default-zone=public >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=20/tcp >/dev/null 2>&1
firewall- cmd --permanent --zone=public --add-port=21/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=80/tcp >/dev/ null 2>&1
firewall-cmd --permanent --zone=public --add-port=${panelPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add- port=${sshPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=39000-40000/tcp >/dev/null 2>&1
systemctl start firewalld
firewall -cmd --reload
systemctl enable firewalld
firewall-cmd --list-all

aaP_ihisham999

aaPanel_Kern

Show error:

root@vmi937441:~# systemctl start firewalld
Failed to start firewalld.service: Unit firewalld.service not found.
root@vmi937441:~# firewall -cmd --reload
-bash: firewall: command not found
root@vmi937441:~# systemctl enable firewalld
Failed to enable unit: Unit file firewalld.service does not exist.

aaPanel_Kern

aaP_ihisham999
Hello, you have not installed ufw, firewalld firewall. What is your system?
Check for iptables
/sbin/iptables -nL
If the command cannot be executed, there is no firewall.
Try to install and set the rules:

debian/ubuntu:
apt-get install -y ufw

panelPort=7800
sshPort=22
/sbin/ufw allow 20/tcp
/sbin/ufw allow 21/tcp
/sbin/ufw allow 80/tcp
/sbin/ufw allow 888/tcp
/sbin/ufw allow 39000:40000/tcp
/sbin/ufw allow ${panelPort}/tcp
/sbin/ufw allow ${sshPort}/tcp
/sbin/ufw reload
/sbin/ufw enable
/sbin/ufw status

Centos:
yum install firewalld -y

panelPort=7800
sshPort=22
firewall-cmd --set-default-zone=public >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=20/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=21/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=80/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=${panelPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=${sshPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=39000-40000/tcp >/dev/null 2>&1
systemctl start firewalld
firewall-cmd --reload
systemctl enable firewalld
firewall-cmd --list-all