{"id":19821,"date":"2017-12-19T12:33:20","date_gmt":"2017-12-19T12:33:20","guid":{"rendered":"https:\/\/blog.resellerclub.com\/?p=19821"},"modified":"2026-05-22T13:12:37","modified_gmt":"2026-05-22T13:12:37","slug":"a-step-by-step-guide-on-how-to-configure-firewall-in-linux","status":"publish","type":"post","link":"https:\/\/www.resellerclub.com\/blog\/a-step-by-step-guide-on-how-to-configure-firewall-in-linux\/","title":{"rendered":"A Step-By-Step Guide on How to Configure a Firewall in Linux"},"content":{"rendered":"

So before we start with the steps involved to configure a firewall in Linux, first let\u2019s make sure we understand what a firewall is and how it works.<\/span><\/p>\n

\"configure<\/p>\n

Understanding what a firewall is and how it works:<\/b><\/h3>\n

A firewall is a program that surrounds the interface between a private network and the rest of the big and (usually) bad internet. You can think of the firewall as a gateway. It follows pre-configured rules that allow certain traffic to pass through from the internet to the private network and blocks those that are unwanted and potentially harmful.<\/span><\/p>\n

Why do I need to configure a firewall for my Linux machine? Isn\u2019t it the safer than most other server OSs?<\/b><\/h3>\n

If you have a Linux machine, you <\/span>are <\/span><\/i>guaranteed a certain level of security by default, courtesy the amazing Linux developer community. Linux systems are generally immune to a majority of viruses and other threats that many other operating systems succumb to. But with the increase in the volume, variety and intensity of cyber threats today, configuring a Linux firewall is quite a necessity.<\/span><\/p>\n<\/p>\n

A step-by-step guide on how to configure firewall in Linux:<\/b><\/p>\n

Step 1 : Beef-up basic Linux security:<\/b><\/p>\n

While this blog is titled to address firewall configuration, the first step is to ensure that the firewall has all the support it needs with a 100% secure Linux machine. To do this, ensure you have all the latest security updates installed for your version of Linux.<\/span><\/p>\n

Step 2: Decide how you want to protect your server:<\/b><\/p>\n

While Iptables is generally where the linux community looks to configure a firewall, there are easier options available that are also free for use. Here are some that we would recommend:<\/span><\/p>\n

1.<\/b>ClearOS<\/b><\/a>:<\/b><\/p>\n

-ClearOS is extremely easy-to-use. It is suitable those who prefer an easy-to-follow UI AND also for geeks who would like to talk to it through the command-line interface<\/span><\/p>\n

Post a 10-minute installation time, you are asked to reboot and are given all the information and support  required to manage your firewall as easily as possible<\/span><\/p>\n

2.<\/b>OPNsense<\/b><\/a>:<\/b><\/p>\n

-OPNsense offers several advanced features not usually found in free firewalls like \u2018forward caching proxy\u2019 and \u2018intrusion detection\u2019. <\/span><\/p>\n

-It supports the use of OpenVPN. To know how useful OpenVPN is, read more <\/span>here<\/span><\/a><\/p>\n

-It uses an Inline Intrusion Prevention System which is a powerful form of Deep Packet Inspection. Here, instead of just blocking an IP address or port, the firewall inspects individual data packets or connections and stops them before they reach the sender if found malicious<\/span><\/p>\n

3.ConfigServer Firewall (CSF)<\/a><\/b>:<\/b><\/p>\n

-CSF is an advanced firewall suite for Linux systems has the Login Failure Daemon (LFD) process that regularly scans for failed login attempts (or \u201cBrute-force attacks\u201d) on your Server and takes action against the offending IP Addresses very quickly<\/span><\/p>\n

-CSF can be managed through the Command Line Interface and its front-end is accessible by the root account through cPanel, DirectAdmin and Webmin which makes configuring and managing the firewall very simple<\/span><\/p>\n<\/p>\n

IPTABLES:<\/b><\/p>\n

Understand Iptables and how it works:<\/b><\/p>\n

The Linux kernel has the capacity to filter incoming and outgoing packages with a filtering tool known as \u2018Iptables\u2019. The Iptables tool is in charge of deciding which packages can come in and go out based on the rules it is configured to follow.<\/span><\/p>\n

First, how to configure the firewall manually:<\/b><\/p>\n

Working with iptables manually can be complicated. We have a quick fix at the bottom of our section you can try. Read on for more.<\/span><\/p>\n

Step 1: Retrieve the Iptables firewall:<\/b><\/p>\n

Iptables is pre-installed on almost every Linux distribution. You can use this command to retrieve the package:<\/span><\/p>\n

sudo apt-get install iptables<\/b><\/p>\n

Step 2: Discover what Iptables is already configured to do by default:<\/b><\/p>\n

Run the iptable L command<\/strong><\/p>\n

Step 3: You can decide to modify the existing rules or instead start afresh:<\/b><\/p>\n

To start afresh, run this command <\/span><\/p>\n

iptables-F<\/b><\/p>\n

Step 4: Decide which firewall ports to close:<\/b><\/p>\n

First block all lines of attack by running the following commands:<\/span><\/p>\n

 Block XMAS Packets: <\/span>iptables -A INPUT -p tcp \u2013tcp-flags ALL ALL -j DROP<\/b><\/p>\n

Block null packets: <\/span>iptables -A INPUT -p tcp \u2013tcp-flags ALL NONE -j DROP<\/b><\/p>\n

Block syn-flood packets:<\/span> iptables -A INPUT -p tcp ! \u2013syn -m state \u2013state NEW -j DROP <\/b><\/p>\n

Step 5: Decide which firewall ports to leave open:<\/b><\/p>\n

Here are some ports you could decide to leave open:<\/span><\/p>\n

For outgoing connections:<\/span><\/p>\n