Plesk - redundant firewalls by default?

[joshb]

I've got a new Plesk VPS, and it appears that there are two places to change firewall settings, and they don't seem to affect each other. That is, if you change the settings in one place, the settings in the other are unchanged. Under System -> Virtuozzo -> VPS Services -> Firewall, you can change the VPS's firewall configuration. Also, there's a Firewall module in System -> Modules.

These two places have different firewall rules available, and the first one seems to be higher priority. This comes up because I'm trying to get some email accounts set up on the VPS, and I'm having trouble connecting from my client. I had the IMAP port open on the second firewall, but not the first.

I've got the IMAP issue cleared up, but it seems a little odd to have the two separate firewalls. Does anyone know why this is the case, and whether or not I should simply disable the one with higher priority? The second one has more pre-configured rules available that I need.

Thanks,

Josh

[JPC-Veena]

Josh,

I suggest using the default virtuozzo firewall at System -> Virtuozzo -> VPS Services -> Firewall
Not sure what the Firewall module inside plesk is about, most probably a copy of the other one provided with plesk. VZ and Plesk are made by the same people, SWSoft.

[thisisit3]

I believe that both are just using the same iptables of the VPS.

Virtuozzo also adds a bunch of tags that are specific for the vps, you can view them by looking at /etc/sysconfig/iptables.

[sysnop]

I believe that both are just using the same iptables of the VPS.

That's what I thought... so I thought I could leave Virtuozzo's firewall off but APF won't work without it and APF front ends in control panels won't work without APF... I understand why VPS firewalls are so confusing with Virtuozzo.

Virtuozzo doesn't manage memory well on my VPS so things break a lot (or I'll just lose ftp access for some reason) and after the VPS (or node) reboots all the iptables get reset.

You're right, the best idea for a Virtuozzo VPS firwall is no firewall.