fail2ban vs sshguard vs csf

Aaron Lavers · Sep 30, 2016

Can I use (fail2ban and csf) or (sshguard and csf) on a same server? Which one do you think is better to prevent your VPS from Brute Force Attacks or DDOS attacks?

LJSHost · Sep 30, 2016

I would just pick one solution as go with it. CSF is very decent, port monitoring and dynamic firewall updates in one nice very configurable little package.
You should have no problems running fail2ban along side CSF for an additional layer of security, but not much reason to do so.

24x7CSM · Nov 11, 2016

CSF is always recommended as it can be configured and optimized. A perfectly tuned CSF can mitigate DDOS attacks too at a certain level and you always have full control since its easy to administrate too.

Polymath · Jan 17, 2017

A while back when I was talking to someone about setting up my first VPS they recommended fail2ban and csf. That's what I am planning on using unless I find out otherwise.

podo609 · Jan 17, 2017

CSF - I am using centinmod and have no problem with sites going down.

eva2000 · Jan 17, 2017

Indeed Centmin Mod LEMP stack auto installs and configures CSF firewall. I highly recommend CSF firewall as it has never failed me !

Been using CSF for over a decade now

hostens · Feb 8, 2017

I prefer CSF mainly because of their integration with control panels and also functionality.

hfav · Feb 8, 2017

We use CSF and Fail2Ban.

CSF for Firewall rule
Fail2Ban for to ban user for 24 hrs.

LJSHost · Feb 8, 2017

If you are already very integrated with Fail2Ban I understand. All solutions discussed here are great, in response to the OP each product has it's advantages and some do things better than others but overall I think all the products mentioned in this thread have balance and a best place for use depending on requirements.

Dewlance · Feb 13, 2017

I prefer CSF because of its so easy to use, debug and fix problems and alternative of Fail2ban is Mod_Security(For protecting attack from hackers, etc but of-course I am not comparing that both are same but just a alternative of customized rules for protecting site.)

CSF is best, They are improving it and main reason is its easy to use it comparing to any other firewall.

gigsgigs · Feb 17, 2017

Yes, you can use fail2ban and csf in the same sever . Mainly for brute force attack.

serverbundle · Mar 7, 2017

You can install them both however, CSF should be sufficient enough. CSF can be extensively customised.

Aaron Lavers · Mar 8, 2017

eva2000 said:
Indeed Centmin Mod LEMP stack auto installs and configures CSF firewall. I highly recommend CSF firewall as it has never failed me !

Been using CSF for over a decade now

hfav said:
We use CSF and Fail2Ban.

CSF for Firewall rule
Fail2Ban for to ban user for 24 hrs.

LJSHost said:
I would just pick one solution as go with it. CSF is very decent, port monitoring and dynamic firewall updates in one nice very configurable little package.
You should have no problems running fail2ban along side CSF for an additional layer of security, but not much reason to do so.

serverbundle said:
You can install them both however, CSF should be sufficient enough. CSF can be extensively customised.

After installed CSF and enabled it

Do I need to have advanced configuration to make it run better for protecting from bots and brute force attacks?

Medhahosting · Jun 22, 2017

I think CSF is good monitoring dynamic firewall CSF can DDOS attacks too at a certain level and you always have full control since its easy to administrate too.

SmileServe · Oct 21, 2017

CSF is an excellent solution for most situations. Imunify360 from the CloudLinux team is also worth considering, can get expensive if you have a lot of servers though.

Aaron Lavers · Dec 27, 2017

HostBastic said:
CSF Firewall comes with a login authentication failure daemon and is able to recognize most unauthorized attempts to gain access to your server. There are several applications which are supported by default such as cPanel, however you can also define your own login files. Its advisable that you perform some custom port configuration.

I am only wondering why I configure number of login fails with csf but I still see message about IP address still bypassed that.

SmileServe said:
CSF is an excellent solution for most situations. Imunify360 from the CloudLinux team is also worth considering, can get expensive if you have a lot of servers though.

I never heard about Imunify360, I will try to check it out and see how it work.
Does it only work with CloudLinux?

fail2ban vs sshguard vs csf

Member

Well-known member

Well-known member

Member

New member

Well-known member

Well-known member

Active member

Well-known member

Well-known member

Member

Member

Member

Member

Member

Member

Sponsors

Tag Cloud