No matter how awesome a job the community do in regulating and answering questions, there needs to be a certain amount of input from Linode staff to keep things going. The occasional confirmation of something, or answering the odd question that the community can't answer. It seems like you guys swung too far in the other direction (of silence) and need to find a middle ground. Because HoopyCat isn't the only one who was starting to feel that the Linode staff had largely abandoned the forums.

AOL.

_________________
Matt Nordhoff (aka Peng on IRC)

Sorry to resurrect an old thread.
I'm a new linodian (is that the term?). A dedicated firewall seems like a good idea to me. I'm scared of locking myself out with iptables. An external service could be more sophisticated and would also take load off the main linode.
I'd feel more secure and would happily pay extra for such a service.

Aside from whether or not this is a good idea, you can use Lish if you get locked out https://library.linode.com/using-lish-the-linode-shell

There are many wrappers around iptables that make it much easier to work with. Uncomplicated Firewall is a good one.

Also, like Nuvini said, if you use Lish you don't need to worry about locking yourself out.

Is ufw for ubuntu?
Should I use it on fedora?

According to this thread Shorewall may be what you're looking for. I've never used either of them though.

I found out fedora uses firewalld
https://fedoraproject.org/wiki/Features ... ld-default

simple as:
#firewall-cmd --add-service=ftp

for persistence you also have to do:
#firewall-cmd --permanent --add-service=ftp

Is this something like Google Compute Engine's firewall? Linode's recent services have made them better than the Google VPS, unless maybe you need a really small VPS, but I think Linode still comes out ahead even there. I assume Linode made the recent changes in response to Google's VPS service; either way it's getting even better.

I don't think it would be too hard to create some sort of web interface to manage iptables, where specific conditions set in a web form would result in corresponding firewall rules. This could also be a huge vulnerability where an attacker could gain access to the panel and remove the firewall entirely. I was reading about memcached for MediaWiki, and apparently it doesn't have any sort of authentication and requires a firewall.