Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Next best firewall after csf?

[todo1419]

Hey

Would like some advise here as our techs are stumped. We have set up csf on a few of our servers, but once set up and configured it starts to send the server load through the roof. We have looked the loads, logged them, monitored them and cannot see what is causing it, yet when we uninstall csf the loads return to normal?

Is there a better alternative to csf that others have had experience with that doesn't require perl to start and run?

Would be much appreciative of your recommendations, as i don't want to attempt to install csf again and have our customers put at risk.

Thanks

[intellitech]

You could look at APF & BFD as an alternative.

[PCS-Chris]

I second using APF/BFD, it's bulletproof.

We provide CSF for customers on request but always use APF+BFD by default, had a few strange issues with CSF.

[LP560]

APF + BFD is the best firewall, CSF is crap never got along with it.

[Atjeu-Damir]

Originally Posted by LP560

APF + BFD is the best firewall, CSF is crap never got along with it.

Why is CSF crap?

[Autumn Networks - Joe]

CSF is a solid package and easy to set up and administer. I am not sure it is entirely to blame for your server load issues as it is more of a catalyst for what ever it does not agree with on your systems. It could be a particular OS distro or some other type of software incompatibility.

I have only used it before so I have nothing else to compare it to however I have used it on various installs and it seems to perform well on each.

[appvzdotcom]

I using APF, It is very easy configure.

[LeaTrueman]

Hello,
If we configure csf properly, there wont be any issues. Its a perfect firewall. I have separate customized csf configurations for different servers and I am using them till now. I havent experienced any problem with them.

APF/BFD is also a good one and very easy to configure.

[sbunnithan]

CSF is a very good firewall and i dont think that it is causing the server load to spike. Check whether its installed and configured properly. You can also opt for APF.

[keserhosting]

If next to the csf firewall then it would be definitely the APF/BFD firewall. If APF/BFD configured properly its too performs well.

[todo1419]

Could you tell me the issues you had? was it a load issue or a kernal panic of somekind?

Originally Posted by PCS-Chris

I second using APF/BFD, it's bulletproof.

We provide CSF for customers on request but always use APF+BFD by default, had a few strange issues with CSF.

[[JSH]John]

I also recommend APF + BFD. Very easy to set up and I've never had a single problem.

It can take a while to set up CSF properly but once it's set up it's a great firewall, with the added advantage of controlling it through WHM/DirectAdmin.