Apf vs VZPP Firewall

[hillbilly]

I just bought the Freedom Plan and have been toiling away at setting up my server as per Greg's security thread. I've installed BFD and configured according to thisisit3. My question...

Is the Virtuozzo firewall sufficient, or do I need to install Apf?

By the way...great forum! I've learned quite a bit from you guys...thank you!

[thisisit3]

The Virtuozzo firewall is nothing more than a "graphical" front-end for iptables. I'm using BFD along with iptables, but i don't use APF since i play with iptables directly.

The first thing to do is run "netstat -n -l" and "netstat -l" to check all listening ports, then shutdown any services you don't want. Once you've made sure that only the minimum ports are open to the public interface then a firewall is pretty much useless since there is nothing to "hide". Ofcourse iptables is then useful for banning attacking IP addresses and doing tricks like that.

[hillbilly]

Thanks, thisisit! Time to bone up on iptables (I'm such a noob)...