Port closing required? (How)

[Server Site]

Hi as of now the site is protected behind Cloudflare Access. Which means any outsider trying to get in will have to provide 2FA code, so no chance.

After installing Direct Admin, is it necessary to block any unnecessary ports? What ports are not required to run websites? I do not possess system administrator skills so asking. Basically, sites will be hosted in the servers. And sending receiving emails. That's all.

Important ports 80, 443 should be opened and the default SSH port which I believe is required to be changed. Other than that, any other listening ports needed to be closed that is not required for my purpose? And can it be done via Direct Admin GUI?

 

[Zhenyapan]

DA by default opens only minimal needed ports, if you installed it with CSF - all already configured.
Now you just can close ports that you don't need - maybe you don't need FTP, or IMAP/POP

 

[Richard G]

and the default SSH port which I believe is required to be changed

Not required, but strongly advised, to minimalise attacks on the SSH port.

 

[Server Site]

DA by default opens only minimal needed ports, if you installed it with CSF - all already configured.
Now you just can close ports that you don't need - maybe you don't need FTP, or IMAP/POP

I don't need FTP but isn't IMAP/POP required for mailing ?

If I am not wrong when you deploy a Cent or Ubuntu VPS from Linode or any other VPS provider, all default ports are gets opened right? I just need ports for my site and receiving/sending emails. Oh and I want to add the custom mail ([email protected]) to my gmail so I can read all mails from one place.

So, I would disable FTP. Any other advice? Thanks

Not required, but strongly advised, to minimalise attacks on the SSH port.

Yes, that's why that is one of top priorities. Thanks.

 

[Richard G]

I don't need FTP but isn't IMAP/POP required for mailing ?

Yes it is. Same for mail/smtp and port 25 for MTA<->MTA traffic.

 

[Server Site]

Yes it is. Same for mail/smtp and port 25 for MTA<->MTA traffic.

Yep, just saw DA has a firewall page where it lists all major necessary ports.