Firewall configuration

MariusE

Hi,

I'm wondering what kind of firewall configuration I should use on my server , what port to close and open?

Also, is OpenVPN pushing any firewall rules already or shoud I make my own?

Thanks,
Marius.

The Johan

Best solution is to put a hardware firewall between your AS and the Internet, and allow only incoming ports TCP 443, TCP 943, and UDP 1194 through.

But in our experience, it's also fine to run AS directly on the Internet. Unless you have bad passwords on your services, it should be okay. If you add some firewall program be careful not to upset the rules in iptables the Access Server uses. And again you only really need ports TCP 443, TCP 943, and UDP 1194 incoming open. And probably port 22 for SSH maintenance access.