Question about firewall

[krazos]

Hi!

 

I'm not exactly sure how to configure the firewall on TCAdmin because gameservers use different and many ports, big port-ranges as well.

 

However, I don't like to have TCAdmin so open, I would like to restrict it.

How did you secure your TCAdmin installation?

 

Im thinking about allowing all ports over 1024, but under 1024 I would only allow some ports, for instance ftp and 80, but restrict 22 (SSH).

 

What do you recommend? Is it safe to run no firewall at all on TCAdmin?

We do have an external firewall, so we can block ssh from the outside.

 

Btw, Is Fail2Ban compatible with TCAdmin? I must have some sort of bruteforce protection against the webserver and ftp server.

[Raizio]

If you have an external firewall. Wouldn't you just need to open ports on that firewall?

Might as well keep it internally open and let the external firewall do all the work.