{"id":31759,"date":"2025-07-14T11:28:39","date_gmt":"2025-07-14T04:28:39","guid":{"rendered":"https:\/\/interdata.vn\/blog\/?p=31759"},"modified":"2025-07-14T11:28:39","modified_gmt":"2025-07-14T04:28:39","slug":"cach-thiet-lap-tuong-lua-cho-vps","status":"publish","type":"post","link":"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/","title":{"rendered":"C\u00e1ch Thi\u1ebft L\u1eadp T\u01b0\u1eddng L\u1eeda Cho VPS: H\u01b0\u1edbng D\u1eabn A-Z"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">N\u1ed8I DUNG<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Tuong-lua-Firewall-cho-VPS-la-gi-va-tai-sao-lai-quan-trong\" >T\u01b0\u1eddng l\u1eeda (Firewall) cho VPS l\u00e0 g\u00ec v\u00e0 t\u1ea1i sao l\u1ea1i quan tr\u1ecdng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Lua-chon-cong-cu-Firewall-phu-hop-cho-VPS-cua-ban\" >L\u1ef1a ch\u1ecdn c\u00f4ng c\u1ee5 Firewall ph\u00f9 h\u1ee3p cho VPS c\u1ee7a b\u1ea1n<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#UFW-Uncomplicated-Firewall\" >UFW (Uncomplicated Firewall)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#CSF-ConfigServer-Security-Firewall\" >CSF (ConfigServer Security &amp; Firewall)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Windows-Defender-Firewall\" >Windows Defender Firewall<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Huong-dan-thiet-lap-tuong-lua-UFW-cho-VPS-Ubuntu\" >H\u01b0\u1edbng d\u1eabn thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda UFW cho VPS Ubuntu<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-1-Cai-dat-va-kich-hoat-UFW\" >B\u01b0\u1edbc 1: C\u00e0i \u0111\u1eb7t v\u00e0 k\u00edch ho\u1ea1t UFW<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-2-Thiet-lap-quy-tac-mac-dinh-Default-Rules\" >B\u01b0\u1edbc 2: Thi\u1ebft l\u1eadp quy t\u1eafc m\u1eb7c \u0111\u1ecbnh (Default Rules)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-3-Mo-cac-port-can-thiet\" >B\u01b0\u1edbc 3: M\u1edf c\u00e1c port c\u1ea7n thi\u1ebft<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-4-Xoa-va-kiem-tra-cac-quy-tac\" >B\u01b0\u1edbc 4: X\u00f3a v\u00e0 ki\u1ec3m tra c\u00e1c quy t\u1eafc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Huong-dan-cai-dat-Firewall-CSF-cho-VPS-CentOSUbuntu\" >H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t Firewall CSF cho VPS (CentOS\/Ubuntu)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-1-Tai-va-cai-dat-CSF\" >B\u01b0\u1edbc 1: T\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t CSF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-2-Cau-hinh-co-ban-CSF\" >B\u01b0\u1edbc 2: C\u1ea5u h\u00ecnh c\u01a1 b\u1ea3n CSF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-3-Khoi-dong-va-quan-ly-CSF\" >B\u01b0\u1edbc 3: Kh\u1edfi \u0111\u1ed9ng v\u00e0 qu\u1ea3n l\u00fd CSF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Buoc-4-Cac-tinh-nang-huu-ich-khac\" >B\u01b0\u1edbc 4: C\u00e1c t\u00ednh n\u0103ng h\u1eefu \u00edch kh\u00e1c<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Mot-so-luu-y-quan-trong-khi-cau-hinh-Firewall\" >M\u1ed9t s\u1ed1 l\u01b0u \u00fd quan tr\u1ecdng khi c\u1ea5u h\u00ecnh Firewall<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Luon-mo-Port-SSH-truoc-tien\" >Lu\u00f4n m\u1edf Port SSH tr\u01b0\u1edbc ti\u00ean<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Kiem-tra-truoc-khi-ap-dung\" >Ki\u1ec3m tra tr\u01b0\u1edbc khi \u00e1p d\u1ee5ng<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Sao-luu-cau-hinh\" >Sao l\u01b0u c\u1ea5u h\u00ecnh<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Cau-hoi-thuong-gap-FAQ\" >C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p (FAQ)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Lam-the-nao-de-kiem-tra-port-dang-mo-tren-VPS\" >L\u00e0m th\u1ebf n\u00e0o \u0111\u1ec3 ki\u1ec3m tra port \u0111ang m\u1edf tr\u00ean VPS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Toi-bi-khoa-khoi-VPS-sau-khi-bat-firewall-phai-lam-sao\" >T\u00f4i b\u1ecb kh\u00f3a kh\u1ecfi VPS sau khi b\u1eadt firewall, ph\u1ea3i l\u00e0m sao?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Dung-Firewall-co-lam-cham-VPS-khong\" >D\u00f9ng Firewall c\u00f3 l\u00e0m ch\u1eadm VPS kh\u00f4ng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/interdata.vn\/blog\/cach-thiet-lap-tuong-lua-cho-vps\/#Nen-mo-nhung-port-nao-cho-mot-website-WordPress\" >N\u00ean m\u1edf nh\u1eefng port n\u00e0o cho m\u1ed9t website WordPress?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<p>Vi\u1ec7c v\u1eadn h\u00e0nh m\u1ed9t m\u00e1y ch\u1ee7 \u1ea3o (<a href=\"https:\/\/interdata.vn\/blog\/vps-la-gi\/\">VPS<\/a>) m\u00e0 kh\u00f4ng c\u00f3 l\u1edbp b\u1ea3o v\u1ec7 v\u1eefng ch\u1eafc c\u0169ng gi\u1ed1ng nh\u01b0 \u0111\u1ec3 ng\u1ecf c\u1eeda nh\u00e0 b\u1ea1n. C\u00e1c m\u1ed1i \u0111e d\u1ecda t\u1ef1 \u0111\u1ed9ng nh\u01b0 botnet li\u00ean t\u1ee5c qu\u00e9t internet \u0111\u1ec3 t\u00ecm ki\u1ebfm nh\u1eefng h\u1ec7 th\u1ed1ng d\u1ec5 b\u1ecb t\u1ed5n th\u01b0\u01a1ng. Vi\u1ec7c thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda l\u00e0 b\u01b0\u1edbc \u0111i c\u01a1 b\u1ea3n nh\u01b0ng c\u1ef1c k\u1ef3 quan tr\u1ecdng \u0111\u1ec3 b\u1ea3o v\u1ec7 t\u00e0i s\u1ea3n s\u1ed1 c\u1ee7a b\u1ea1n.<\/p>\n<p>B\u00e0i vi\u1ebft n\u00e0y c\u1ee7a <strong><a target=\"_blank\" rel=\"noopener noreferrer\" href=\"https:\/\/interdata.vn\/\">InterData<\/a><\/strong> s\u1ebd h\u01b0\u1edbng d\u1eabn b\u1ea1n t\u1eebng b\u01b0\u1edbc c\u00e1ch thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda cho VPS. Ch\u00fang t\u00f4i s\u1ebd \u0111i t\u1eeb nh\u1eefng kh\u00e1i ni\u1ec7m c\u01a1 b\u1ea3n nh\u1ea5t \u0111\u1ebfn vi\u1ec7c c\u1ea5u h\u00ecnh chi ti\u1ebft c\u00e1c c\u00f4ng c\u1ee5 firewall ph\u1ed5 bi\u1ebfn, \u0111\u1ea3m b\u1ea3o ngay c\u1ea3 ng\u01b0\u1eddi m\u1edbi b\u1eaft \u0111\u1ea7u c\u0169ng c\u00f3 th\u1ec3 t\u1ef1 tin th\u1ef1c hi\u1ec7n.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Tuong-lua-Firewall-cho-VPS-la-gi-va-tai-sao-lai-quan-trong\"><\/span>T\u01b0\u1eddng l\u1eeda (Firewall) cho VPS l\u00e0 g\u00ec v\u00e0 t\u1ea1i sao l\u1ea1i quan tr\u1ecdng?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>H\u00e3y h\u00ecnh dung t\u01b0\u1eddng l\u1eeda nh\u01b0 m\u1ed9t ng\u01b0\u1eddi b\u1ea3o v\u1ec7 k\u1ef9 thu\u1eadt s\u1ed1 \u0111\u1ee9ng canh g\u00e1c t\u1ea1i c\u1ed5ng v\u00e0o c\u1ee7a VPS. Nhi\u1ec7m v\u1ee5 ch\u00ednh c\u1ee7a t\u01b0\u1eddng l\u1eeda l\u00e0 gi\u00e1m s\u00e1t v\u00e0 l\u1ecdc t\u1ea5t c\u1ea3 l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng \u0111i v\u00e0o v\u00e0 \u0111i ra d\u1ef1a tr\u00ean m\u1ed9t b\u1ed9 quy t\u1eafc b\u1ea3o m\u1eadt \u0111\u00e3 \u0111\u01b0\u1ee3c \u0111\u1ecbnh s\u1eb5n. T\u01b0\u1eddng l\u1eeda quy\u1ebft \u0111\u1ecbnh cho ph\u00e9p nh\u1eefng k\u1ebft n\u1ed1i an to\u00e0n v\u00e0 ch\u1eb7n \u0111\u1ee9ng nh\u1eefng truy c\u1eadp \u0111\u00e1ng ng\u1edd.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Thiet_lap_tuong_lua_VPS_1.jpg\" alt=\"Thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda cho VPS\" width=\"600\" height=\"400\" class=\"aligncenter size-full wp-image-31761\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Thiet_lap_tuong_lua_VPS_1.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Thiet_lap_tuong_lua_VPS_1-300x200.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>T\u1ea7m quan tr\u1ecdng c\u1ee7a t\u01b0\u1eddng l\u1eeda kh\u00f4ng th\u1ec3 b\u1ecb xem nh\u1eb9. Theo c\u00e1c b\u00e1o c\u00e1o an ninh m\u1ea1ng, h\u00e0ng ng\u00e0n cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ef1 \u0111\u1ed9ng di\u1ec5n ra m\u1ed7i ph\u00fat tr\u00ean to\u00e0n c\u1ea7u. M\u1ed9t VPS kh\u00f4ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 c\u00f3 th\u1ec3 b\u1ecb x\u00e2m nh\u1eadp ch\u1ec9 trong v\u00e0i gi\u1edd. T\u01b0\u1eddng l\u1eeda gi\u00fap b\u1ea1n ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda ph\u1ed5 bi\u1ebfn nh\u1ea5t, \u0111\u1ea3m b\u1ea3o s\u1ef1 \u1ed5n \u0111\u1ecbnh v\u00e0 an to\u00e0n cho d\u1eef li\u1ec7u.<\/p>\n<p>C\u1ee5 th\u1ec3, t\u01b0\u1eddng l\u1eeda b\u1ea3o v\u1ec7 VPS c\u1ee7a b\u1ea1n b\u1eb1ng c\u00e1ch:<\/p>\n<ul>\n<li><strong>Ch\u1eb7n c\u00e1c truy c\u1eadp tr\u00e1i ph\u00e9p:<\/strong> Ng\u0103n ch\u1eb7n hacker v\u00e0 c\u00e1c bot \u0111\u1ed9c h\u1ea1i c\u1ed1 g\u1eafng d\u00f2 t\u00ecm m\u1eadt kh\u1ea9u (brute-force attack) qua c\u00e1c c\u1ed5ng d\u1ecbch v\u1ee5 nh\u01b0 SSH ho\u1eb7c Remote Desktop.<\/li>\n<li><strong>Ng\u0103n ng\u1eeba ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i:<\/strong> H\u1ea1n ch\u1ebf kh\u1ea3 n\u0103ng l\u00e2y nhi\u1ec5m malware b\u1eb1ng c\u00e1ch ch\u1eb7n c\u00e1c k\u1ebft n\u1ed1i \u0111\u1ebfn t\u1eeb nh\u1eefng ngu\u1ed3n kh\u00f4ng \u0111\u00e1ng tin c\u1eady.<\/li>\n<li><strong>Ki\u1ec3m so\u00e1t lu\u1ed3ng d\u1eef li\u1ec7u:<\/strong> Cho ph\u00e9p b\u1ea1n to\u00e0n quy\u1ec1n quy\u1ebft \u0111\u1ecbnh d\u1ecbch v\u1ee5 n\u00e0o \u0111\u01b0\u1ee3c ph\u00e9p giao ti\u1ebfp v\u1edbi internet, gi\u1ea3m thi\u1ec3u b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng c\u1ee7a h\u1ec7 th\u1ed1ng.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Lua-chon-cong-cu-Firewall-phu-hop-cho-VPS-cua-ban\"><\/span>L\u1ef1a ch\u1ecdn c\u00f4ng c\u1ee5 Firewall ph\u00f9 h\u1ee3p cho VPS c\u1ee7a b\u1ea1n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Vi\u1ec7c l\u1ef1a ch\u1ecdn c\u00f4ng c\u1ee5 t\u01b0\u1eddng l\u1eeda ph\u1ee5 thu\u1ed9c ch\u1ee7 y\u1ebfu v\u00e0o <a href=\"https:\/\/interdata.vn\/blog\/he-dieu-hanh\/\">h\u1ec7 \u0111i\u1ec1u h\u00e0nh<\/a> b\u1ea1n \u0111ang s\u1eed d\u1ee5ng v\u00e0 m\u1ee9c \u0111\u1ed9 ki\u1ec3m so\u00e1t b\u1ea1n mong mu\u1ed1n. M\u1ed7i c\u00f4ng c\u1ee5 \u0111\u1ec1u c\u00f3 \u01b0u v\u00e0 nh\u01b0\u1ee3c \u0111i\u1ec3m ri\u00eang. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 ba l\u1ef1a ch\u1ecdn ph\u1ed5 bi\u1ebfn nh\u1ea5t hi\u1ec7n nay m\u00e0 b\u1ea1n n\u00ean c\u00e2n nh\u1eafc.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"UFW-Uncomplicated-Firewall\"><\/span>UFW (Uncomplicated Firewall)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u00fang nh\u01b0 t\u00ean g\u1ecdi, UFW l\u00e0 m\u1ed9t giao di\u1ec7n qu\u1ea3n l\u00fd t\u01b0\u1eddng l\u1eeda \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 \u0111\u01a1n gi\u1ea3n h\u00f3a qu\u00e1 tr\u00ecnh c\u1ea5u h\u00ecnh Iptables. UFW l\u00e0 l\u1ef1a ch\u1ecdn m\u1eb7c \u0111\u1ecbnh v\u00e0 \u0111\u01b0\u1ee3c khuy\u1ebfn ngh\u1ecb cho ng\u01b0\u1eddi d\u00f9ng h\u1ec7 \u0111i\u1ec1u h\u00e0nh Ubuntu, \u0111\u1eb7c bi\u1ec7t l\u00e0 nh\u1eefng ng\u01b0\u1eddi m\u1edbi b\u1eaft \u0111\u1ea7u. \u01afu \u0111i\u1ec3m l\u1edbn nh\u1ea5t c\u1ee7a UFW l\u00e0 c\u00fa ph\u00e1p l\u1ec7nh ng\u1eafn g\u1ecdn, d\u1ec5 hi\u1ec3u v\u00e0 d\u1ec5 nh\u1edb.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/UFW.jpg\" alt=\"UFW\" width=\"600\" height=\"354\" class=\"aligncenter size-full wp-image-31764\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/UFW.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/UFW-300x177.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"CSF-ConfigServer-Security-Firewall\"><\/span>CSF (ConfigServer Security &amp; Firewall)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>CSF l\u00e0 m\u1ed9t b\u1ed9 c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt to\u00e0n di\u1ec7n v\u00e0 m\u1ea1nh m\u1ebd h\u01a1n. Ngo\u00e0i ch\u1ee9c n\u0103ng t\u01b0\u1eddng l\u1eeda, CSF c\u00f2n t\u00edch h\u1ee3p Login Failure Daemon (LFD) &#8211; m\u1ed9t ti\u1ebfn tr\u00ecnh t\u1ef1 \u0111\u1ed9ng qu\u00e9t file log \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng brute-force v\u00e0 t\u1ef1 \u0111\u1ed9ng ch\u1eb7n IP vi ph\u1ea1m. CSF l\u00e0 l\u1ef1a ch\u1ecdn h\u00e0ng \u0111\u1ea7u cho c\u00e1c m\u00e1y ch\u1ee7 y\u00eau c\u1ea7u b\u1ea3o m\u1eadt cao, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c VPS c\u00f3 c\u00e0i \u0111\u1eb7t control panel nh\u01b0 cPanel ho\u1eb7c <a href=\"https:\/\/interdata.vn\/blog\/directadmin-la-gi\/\">DirectAdmin<\/a>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/CSF.jpg\" alt=\"CSF\" width=\"600\" height=\"310\" class=\"aligncenter size-full wp-image-31763\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/CSF.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/CSF-300x155.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Windows-Defender-Firewall\"><\/span>Windows Defender Firewall<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng VPS ch\u1ea1y h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows Server, Windows Defender Firewall l\u00e0 m\u1ed9t gi\u1ea3i ph\u00e1p t\u00edch h\u1ee3p s\u1eb5n v\u00f4 c\u00f9ng hi\u1ec7u qu\u1ea3. C\u00f4ng c\u1ee5 n\u00e0y cung c\u1ea5p giao di\u1ec7n \u0111\u1ed3 h\u1ecda tr\u1ef1c quan \u0111\u1ec3 t\u1ea1o c\u00e1c quy t\u1eafc cho k\u1ebft n\u1ed1i \u0111\u1ebfn (Inbound Rules) v\u00e0 \u0111i (Outbound Rules), gi\u00fap vi\u1ec7c qu\u1ea3n l\u00fd tr\u1edf n\u00ean \u0111\u01a1n gi\u1ea3n h\u01a1n so v\u1edbi vi\u1ec7c s\u1eed d\u1ee5ng d\u00f2ng l\u1ec7nh.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Windows_Defender_Firewall.jpg\" alt=\"Windows_Defender_Firewall\" width=\"600\" height=\"441\" class=\"aligncenter size-full wp-image-31765\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Windows_Defender_Firewall.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Windows_Defender_Firewall-300x221.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Huong-dan-thiet-lap-tuong-lua-UFW-cho-VPS-Ubuntu\"><\/span>H\u01b0\u1edbng d\u1eabn thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda UFW cho VPS Ubuntu<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>UFW l\u00e0 \u0111i\u1ec3m kh\u1edfi \u0111\u1ea7u tuy\u1ec7t v\u1eddi \u0111\u1ec3 b\u1ea3o v\u1ec7 VPS Ubuntu. Qu\u00e1 tr\u00ecnh thi\u1ebft l\u1eadp r\u1ea5t nhanh ch\u00f3ng v\u00e0 tr\u1ef1c quan. H\u00e3y \u0111\u1ea3m b\u1ea3o b\u1ea1n \u0111ang \u0111\u0103ng nh\u1eadp v\u00e0o VPS v\u1edbi quy\u1ec1n root ho\u1eb7c ng\u01b0\u1eddi d\u00f9ng c\u00f3 quy\u1ec1n sudo.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Thiet_lap_tuong_lua_VPS_2.jpg\" alt=\"Thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda cho VPS\" width=\"600\" height=\"400\" class=\"aligncenter size-full wp-image-31762\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Thiet_lap_tuong_lua_VPS_2.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/07\/Thiet_lap_tuong_lua_VPS_2-300x200.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-1-Cai-dat-va-kich-hoat-UFW\"><\/span>B\u01b0\u1edbc 1: C\u00e0i \u0111\u1eb7t v\u00e0 k\u00edch ho\u1ea1t UFW<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tr\u00ean h\u1ea7u h\u1ebft c\u00e1c phi\u00ean b\u1ea3n Ubuntu m\u1edbi, UFW \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t s\u1eb5n. B\u1ea1n c\u00f3 th\u1ec3 ki\u1ec3m tra b\u1eb1ng l\u1ec7nh <code>ufw status<\/code>. N\u1ebfu ch\u01b0a c\u00f3, h\u00e3y ch\u1ea1y l\u1ec7nh sau \u0111\u1ec3 c\u00e0i \u0111\u1eb7t:<\/p>\n<pre><code class=\"language-plaintext\">sudo apt update\r\nsudo apt install ufw<\/code><\/pre>\n<p>Sau khi c\u00e0i \u0111\u1eb7t, b\u1ea1n c\u1ea7n k\u00edch ho\u1ea1t UFW. Tuy nhi\u00ean, tr\u01b0\u1edbc khi l\u00e0m \u0111i\u1ec1u \u0111\u00f3, h\u00e3y ch\u1eafc ch\u1eafn b\u1ea1n \u0111\u00e3 cho ph\u00e9p k\u1ebft n\u1ed1i SSH \u1edf b\u01b0\u1edbc ti\u1ebfp theo \u0111\u1ec3 kh\u00f4ng t\u1ef1 kh\u00f3a m\u00ecnh kh\u1ecfi VPS.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-2-Thiet-lap-quy-tac-mac-dinh-Default-Rules\"><\/span>B\u01b0\u1edbc 2: Thi\u1ebft l\u1eadp quy t\u1eafc m\u1eb7c \u0111\u1ecbnh (Default Rules)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>M\u1ed9t nguy\u00ean t\u1eafc b\u1ea3o m\u1eadt v\u00e0ng l\u00e0 &#8220;ch\u1eb7n t\u1ea5t c\u1ea3, ch\u1ec9 cho ph\u00e9p nh\u1eefng g\u00ec c\u1ea7n thi\u1ebft&#8221;. Ch\u00fang ta s\u1ebd \u00e1p d\u1ee5ng nguy\u00ean t\u1eafc n\u00e0y b\u1eb1ng c\u00e1ch t\u1eeb ch\u1ed1i t\u1ea5t c\u1ea3 c\u00e1c k\u1ebft n\u1ed1i \u0111\u1ebfn v\u00e0 cho ph\u00e9p t\u1ea5t c\u1ea3 c\u00e1c k\u1ebft n\u1ed1i \u0111i.<\/p>\n<pre><code class=\"language-plaintext\">sudo ufw default deny incoming\r\nsudo ufw default allow outgoing<\/code><\/pre>\n<p>Thi\u1ebft l\u1eadp n\u00e0y t\u1ea1o ra m\u1ed9t n\u1ec1n t\u1ea3ng an to\u00e0n. M\u1eb7c \u0111\u1ecbnh, kh\u00f4ng ai c\u00f3 th\u1ec3 truy c\u1eadp v\u00e0o VPS c\u1ee7a b\u1ea1n t\u1eeb b\u00ean ngo\u00e0i, nh\u01b0ng c\u00e1c \u1ee9ng d\u1ee5ng b\u00ean trong VPS v\u1eabn c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i ra internet \u0111\u1ec3 c\u1eadp nh\u1eadt ho\u1eb7c s\u1eed d\u1ee5ng c\u00e1c d\u1ecbch v\u1ee5 kh\u00e1c.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-3-Mo-cac-port-can-thiet\"><\/span>B\u01b0\u1edbc 3: M\u1edf c\u00e1c port c\u1ea7n thi\u1ebft<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>B\u00e2y gi\u1edd, ch\u00fang ta s\u1ebd &#8220;\u0111\u1ee5c l\u1ed7&#8221; tr\u00ean t\u01b0\u1eddng l\u1eeda \u0111\u1ec3 cho ph\u00e9p c\u00e1c k\u1ebft n\u1ed1i h\u1ee3p l\u1ec7. <strong>\u0110i\u1ec1u quan tr\u1ecdng nh\u1ea5t l\u00e0 ph\u1ea3i m\u1edf c\u1ed5ng SSH tr\u01b0\u1edbc ti\u00ean.<\/strong> N\u1ebfu b\u1ea1n b\u1ecf qua b\u01b0\u1edbc n\u00e0y v\u00e0 b\u1eadt t\u01b0\u1eddng l\u1eeda, b\u1ea1n s\u1ebd ngay l\u1eadp t\u1ee9c b\u1ecb m\u1ea5t k\u1ebft n\u1ed1i.<\/p>\n<pre><code class=\"language-plaintext\"># M\u1edf c\u1ed5ng SSH (c\u1ed5ng 22 l\u00e0 m\u1eb7c \u0111\u1ecbnh)\r\nsudo ufw allow ssh\r\n# Ho\u1eb7c sudo ufw allow 22\/tcp\r\n\r\n# M\u1edf c\u1ed5ng HTTP cho web server\r\nsudo ufw allow http\r\n# Ho\u1eb7c sudo ufw allow 80\/tcp\r\n\r\n# M\u1edf c\u1ed5ng HTTPS cho web server\r\nsudo ufw allow https\r\n# Ho\u1eb7c sudo ufw allow 443\/tcp<\/code><\/pre>\n<p>Sau khi \u0111\u00e3 ch\u1eafc ch\u1eafn m\u1edf c\u1ed5ng SSH v\u00e0 c\u00e1c c\u1ed5ng c\u1ea7n thi\u1ebft kh\u00e1c, b\u1ea1n c\u00f3 th\u1ec3 an to\u00e0n k\u00edch ho\u1ea1t UFW:<\/p>\n<pre><code class=\"language-plaintext\">sudo ufw enable<\/code><\/pre>\n<p>H\u1ec7 th\u1ed1ng s\u1ebd h\u1ecfi b\u1ea1n x\u00e1c nh\u1eadn, h\u00e3y nh\u1eadp <code>y<\/code> v\u00e0 nh\u1ea5n Enter.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-4-Xoa-va-kiem-tra-cac-quy-tac\"><\/span>B\u01b0\u1edbc 4: X\u00f3a v\u00e0 ki\u1ec3m tra c\u00e1c quy t\u1eafc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ec3 xem danh s\u00e1ch c\u00e1c quy t\u1eafc b\u1ea1n \u0111\u00e3 thi\u1ebft l\u1eadp c\u00f9ng v\u1edbi s\u1ed1 th\u1ee9 t\u1ef1, h\u00e3y s\u1eed d\u1ee5ng l\u1ec7nh:<\/p>\n<pre><code class=\"language-plaintext\">sudo ufw status numbered<\/code><\/pre>\n<p>N\u1ebfu b\u1ea1n mu\u1ed1n x\u00f3a m\u1ed9t quy t\u1eafc n\u00e0o \u0111\u00f3, ch\u1ec9 c\u1ea7n d\u00f9ng l\u1ec7nh <code>ufw delete<\/code> theo sau l\u00e0 s\u1ed1 th\u1ee9 t\u1ef1 c\u1ee7a quy t\u1eafc \u0111\u00f3. V\u00ed d\u1ee5, \u0111\u1ec3 x\u00f3a quy t\u1eafc s\u1ed1 3:<\/p>\n<pre><code class=\"language-plaintext\">sudo ufw delete 3<\/code><\/pre>\n<h2><span class=\"ez-toc-section\" id=\"Huong-dan-cai-dat-Firewall-CSF-cho-VPS-CentOSUbuntu\"><\/span>H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t Firewall CSF cho VPS (CentOS\/Ubuntu)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>CSF cung c\u1ea5p m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7 n\u00e2ng cao h\u01a1n. Qu\u00e1 tr\u00ecnh c\u00e0i \u0111\u1eb7t ph\u1ee9c t\u1ea1p h\u01a1n m\u1ed9t ch\u00fat so v\u1edbi UFW nh\u01b0ng mang l\u1ea1i kh\u1ea3 n\u0103ng ki\u1ec3m so\u00e1t v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a v\u01b0\u1ee3t tr\u1ed9i.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-1-Tai-va-cai-dat-CSF\"><\/span>B\u01b0\u1edbc 1: T\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t CSF<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ea7u ti\u00ean, h\u00e3y c\u00e0i \u0111\u1eb7t c\u00e1c g\u00f3i ph\u1ee5 thu\u1ed9c c\u1ea7n thi\u1ebft.<\/p>\n<pre><code class=\"language-plaintext\"># \u0110\u1ed1i v\u1edbi CentOS\/RHEL\r\nsudo yum install wget perl net-tools perl-libwww-perl\r\n\r\n# \u0110\u1ed1i v\u1edbi Ubuntu\/Debian\r\nsudo apt install wget perl libwww-perl<\/code><\/pre>\n<p>Ti\u1ebfp theo, t\u1ea3i v\u1ec1 b\u1ed9 c\u00e0i \u0111\u1eb7t CSF, gi\u1ea3i n\u00e9n v\u00e0 ch\u1ea1y script c\u00e0i \u0111\u1eb7t.<\/p>\n<pre><code class=\"language-plaintext\">cd \/usr\/src\r\nsudo wget https:\/\/download.configserver.com\/csf.tgz\r\nsudo tar -xzf csf.tgz\r\ncd csf\r\nsudo sh install.sh<\/code><\/pre>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-2-Cau-hinh-co-ban-CSF\"><\/span>B\u01b0\u1edbc 2: C\u1ea5u h\u00ecnh c\u01a1 b\u1ea3n CSF<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sau khi c\u00e0i \u0111\u1eb7t, CSF s\u1ebd ch\u1ea1y \u1edf ch\u1ebf \u0111\u1ed9 <code>TESTING<\/code>. B\u1ea1n c\u1ea7n c\u1ea5u h\u00ecnh c\u00e1c port c\u1ea7n thi\u1ebft tr\u01b0\u1edbc khi t\u1eaft ch\u1ebf \u0111\u1ed9 n\u00e0y. M\u1edf file c\u1ea5u h\u00ecnh ch\u00ednh:<\/p>\n<pre><code class=\"language-plaintext\">sudo nano \/etc\/csf\/csf.conf<\/code><\/pre>\n<p>T\u00ecm v\u00e0 ch\u1ec9nh s\u1eeda c\u00e1c d\u00f2ng sau:<\/p>\n<ul>\n<li><code>TESTING = \"1\"<\/code>: T\u1ea1m th\u1eddi gi\u1eef nguy\u00ean gi\u00e1 tr\u1ecb n\u00e0y. Ch\u00fang ta s\u1ebd \u0111\u1ed5i th\u00e0nh <code>0<\/code> sau khi c\u1ea5u h\u00ecnh xong.<\/li>\n<li><code>TCP_IN<\/code>: \u0110\u00e2y l\u00e0 danh s\u00e1ch c\u00e1c port TCP cho ph\u00e9p k\u1ebft n\u1ed1i \u0111\u1ebfn. M\u1ed9t c\u1ea5u h\u00ecnh ph\u1ed5 bi\u1ebfn cho web server l\u00e0: <code>TCP_IN = \"20,21,22,25,53,80,110,143,443,465,587,993,995\"<\/code><\/li>\n<li><code>TCP_OUT<\/code>: Danh s\u00e1ch c\u00e1c port TCP cho ph\u00e9p k\u1ebft n\u1ed1i \u0111i. Th\u01b0\u1eddng c\u00f3 th\u1ec3 \u0111\u1ec3 m\u1eb7c \u0111\u1ecbnh.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-3-Khoi-dong-va-quan-ly-CSF\"><\/span>B\u01b0\u1edbc 3: Kh\u1edfi \u0111\u1ed9ng v\u00e0 qu\u1ea3n l\u00fd CSF<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sau khi \u0111\u00e3 ch\u1ec9nh s\u1eeda file c\u1ea5u h\u00ecnh v\u00e0 l\u01b0u l\u1ea1i, h\u00e3y kh\u1edfi \u0111\u1ed9ng l\u1ea1i CSF \u0111\u1ec3 \u00e1p d\u1ee5ng thay \u0111\u1ed5i.<\/p>\n<pre><code class=\"language-plaintext\">sudo csf -r<\/code><\/pre>\n<p>Khi b\u1ea1n \u0111\u00e3 ch\u1eafc ch\u1eafn r\u1eb1ng m\u1ecdi th\u1ee9 ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng (b\u1ea1n v\u1eabn c\u00f3 th\u1ec3 truy c\u1eadp SSH, website v\u1eabn ho\u1ea1t \u0111\u1ed9ng), h\u00e3y quay l\u1ea1i file <code>csf.conf<\/code> v\u00e0 \u0111\u1ed5i <code>TESTING = \"1\"<\/code> th\u00e0nh <code>TESTING = \"0\"<\/code>. Sau \u0111\u00f3 kh\u1edfi \u0111\u1ed9ng l\u1ea1i CSF l\u1ea7n n\u1eefa.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-4-Cac-tinh-nang-huu-ich-khac\"><\/span>B\u01b0\u1edbc 4: C\u00e1c t\u00ednh n\u0103ng h\u1eefu \u00edch kh\u00e1c<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>S\u1ee9c m\u1ea1nh c\u1ee7a CSF n\u1eb1m \u1edf c\u00e1c t\u00ednh n\u0103ng qu\u1ea3n l\u00fd d\u1ec5 d\u00e0ng.<\/p>\n<ul>\n<li><strong>Ch\u1eb7n m\u1ed9t <a href=\"https:\/\/interdata.vn\/blog\/dia-chi-ip-la-gi\/\">\u0111\u1ecba ch\u1ec9 IP<\/a>:<\/strong> <code>sudo csf -d IP_ADDRESS<\/code><\/li>\n<li><strong>Cho ph\u00e9p m\u1ed9t \u0111\u1ecba ch\u1ec9 IP:<\/strong> <code>sudo csf -a IP_ADDRESS<\/code><\/li>\n<li><strong>B\u1ecf ch\u1eb7n m\u1ed9t \u0111\u1ecba ch\u1ec9 IP:<\/strong> <code>sudo csf -dr IP_ADDRESS<\/code><\/li>\n<\/ul>\n<p>T\u00ednh n\u0103ng Login Failure Daemon (LFD) s\u1ebd t\u1ef1 \u0111\u1ed9ng ch\u1ea1y v\u00e0 b\u1ea3o v\u1ec7 VPS c\u1ee7a b\u1ea1n kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng d\u00f2 m\u1eadt kh\u1ea9u m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea1n can thi\u1ec7p th\u00eam.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Mot-so-luu-y-quan-trong-khi-cau-hinh-Firewall\"><\/span>M\u1ed9t s\u1ed1 l\u01b0u \u00fd quan tr\u1ecdng khi c\u1ea5u h\u00ecnh Firewall<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Vi\u1ec7c c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda \u0111\u00f2i h\u1ecfi s\u1ef1 c\u1ea9n tr\u1ecdng. M\u1ed9t sai l\u1ea7m nh\u1ecf c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn vi\u1ec7c d\u1ecbch v\u1ee5 b\u1ecb gi\u00e1n \u0111o\u1ea1n ho\u1eb7c t\u1ec7 h\u01a1n l\u00e0 b\u1ea1n kh\u00f4ng th\u1ec3 truy c\u1eadp v\u00e0o ch\u00ednh m\u00e1y ch\u1ee7 c\u1ee7a m\u00ecnh.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Luon-mo-Port-SSH-truoc-tien\"><\/span>Lu\u00f4n m\u1edf Port SSH tr\u01b0\u1edbc ti\u00ean<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u00e2y l\u00e0 l\u1eddi nh\u1eafc nh\u1edf quan tr\u1ecdng nh\u1ea5t. D\u00f9 b\u1ea1n s\u1eed d\u1ee5ng UFW hay CSF, quy t\u1eafc \u0111\u1ea7u ti\u00ean b\u1ea1n n\u00ean th\u00eam lu\u00f4n l\u00e0 cho ph\u00e9p k\u1ebft n\u1ed1i qua c\u1ed5ng SSH. N\u1ebfu b\u1ea1n k\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda v\u1edbi ch\u00ednh s\u00e1ch m\u1eb7c \u0111\u1ecbnh l\u00e0 ch\u1eb7n t\u1ea5t c\u1ea3 m\u00e0 ch\u01b0a m\u1edf c\u1ed5ng SSH, k\u1ebft n\u1ed1i hi\u1ec7n t\u1ea1i c\u1ee7a b\u1ea1n s\u1ebd b\u1ecb ng\u1eaft v\u00e0 b\u1ea1n kh\u00f4ng th\u1ec3 k\u1ebft n\u1ed1i l\u1ea1i.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kiem-tra-truoc-khi-ap-dung\"><\/span>Ki\u1ec3m tra tr\u01b0\u1edbc khi \u00e1p d\u1ee5ng<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>CSF c\u00f3 ch\u1ebf \u0111\u1ed9 <code>TESTING<\/code> r\u1ea5t h\u1eefu \u00edch. Ch\u1ebf \u0111\u1ed9 n\u00e0y s\u1ebd t\u1ef1 \u0111\u1ed9ng x\u00f3a t\u1ea5t c\u1ea3 c\u00e1c quy t\u1eafc t\u01b0\u1eddng l\u1eeda sau m\u1ed9t kho\u1ea3ng th\u1eddi gian ng\u1eafn (m\u1eb7c \u0111\u1ecbnh l\u00e0 5 ph\u00fat), gi\u00fap b\u1ea1n c\u00f3 c\u01a1 h\u1ed9i s\u1eeda l\u1ed7i n\u1ebfu c\u1ea5u h\u00ecnh sai. \u0110\u1ed1i v\u1edbi UFW, h\u00e3y lu\u00f4n d\u00f9ng l\u1ec7nh <code>ufw status<\/code> \u0111\u1ec3 ki\u1ec3m tra l\u1ea1i c\u00e1c quy t\u1eafc tr\u01b0\u1edbc khi ch\u1ea1y l\u1ec7nh <code>ufw enable<\/code>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sao-luu-cau-hinh\"><\/span>Sao l\u01b0u c\u1ea5u h\u00ecnh<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tr\u01b0\u1edbc khi th\u1ef1c hi\u1ec7n nh\u1eefng thay \u0111\u1ed5i l\u1edbn, b\u1ea1n n\u00ean t\u1ea1o m\u1ed9t b\u1ea3n sao l\u01b0u cho file c\u1ea5u h\u00ecnh. \u0110\u1ed1i v\u1edbi UFW, c\u00e1c quy t\u1eafc n\u1eb1m trong th\u01b0 m\u1ee5c <code>\/etc\/ufw\/<\/code>. \u0110\u1ed1i v\u1edbi CSF, file c\u1ea5u h\u00ecnh ch\u00ednh l\u00e0 <code>\/etc\/csf\/csf.conf<\/code>. M\u1ed9t l\u1ec7nh sao l\u01b0u \u0111\u01a1n gi\u1ea3n c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n ti\u1ebft ki\u1ec7m r\u1ea5t nhi\u1ec1u th\u1eddi gian sau n\u00e0y.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cau-hoi-thuong-gap-FAQ\"><\/span>C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p (FAQ)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 c\u00e2u h\u1ecfi m\u00e0 \u0111\u1ed9i ng\u0169 c\u1ee7a InterData th\u01b0\u1eddng nh\u1eadn \u0111\u01b0\u1ee3c t\u1eeb ng\u01b0\u1eddi d\u00f9ng khi h\u1ecd b\u1eaft \u0111\u1ea7u t\u00ecm hi\u1ec3u v\u1ec1 t\u01b0\u1eddng l\u1eeda cho VPS.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Lam-the-nao-de-kiem-tra-port-dang-mo-tren-VPS\"><\/span>L\u00e0m th\u1ebf n\u00e0o \u0111\u1ec3 ki\u1ec3m tra port \u0111ang m\u1edf tr\u00ean VPS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng l\u1ec7nh <code>netstat -tuln<\/code> ho\u1eb7c <code>ss -tuln<\/code> tr\u00ean terminal. C\u00e1c l\u1ec7nh n\u00e0y s\u1ebd li\u1ec7t k\u00ea t\u1ea5t c\u1ea3 c\u00e1c c\u1ed5ng \u0111ang &#8220;l\u1eafng nghe&#8221; k\u1ebft n\u1ed1i tr\u00ean m\u00e1y ch\u1ee7 c\u1ee7a b\u1ea1n, gi\u00fap b\u1ea1n x\u00e1c \u0111\u1ecbnh d\u1ecbch v\u1ee5 n\u00e0o \u0111ang ch\u1ea1y v\u00e0 c\u1ea7n \u0111\u01b0\u1ee3c cho ph\u00e9p qua t\u01b0\u1eddng l\u1eeda.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Toi-bi-khoa-khoi-VPS-sau-khi-bat-firewall-phai-lam-sao\"><\/span>T\u00f4i b\u1ecb kh\u00f3a kh\u1ecfi VPS sau khi b\u1eadt firewall, ph\u1ea3i l\u00e0m sao?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u00e2y l\u00e0 m\u1ed9t t\u00ecnh hu\u1ed1ng kh\u00e1 ph\u1ed5 bi\u1ebfn. H\u1ea7u h\u1ebft c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 VPS nh\u01b0 InterData \u0111\u1ec1u cung c\u1ea5p m\u1ed9t ph\u01b0\u01a1ng th\u1ee9c truy c\u1eadp kh\u1ea9n c\u1ea5p qua &#8220;Console&#8221; ho\u1eb7c &#8220;VNC&#8221; trong b\u1ea3ng \u0111i\u1ec1u khi\u1ec3n kh\u00e1ch h\u00e0ng. B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng giao di\u1ec7n n\u00e0y \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0 v\u00f4 hi\u1ec7u h\u00f3a t\u01b0\u1eddng l\u1eeda (<code>ufw disable<\/code> ho\u1eb7c <code>csf -f<\/code>) \u0111\u1ec3 l\u1ea5y l\u1ea1i quy\u1ec1n truy c\u1eadp SSH.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dung-Firewall-co-lam-cham-VPS-khong\"><\/span>D\u00f9ng Firewall c\u00f3 l\u00e0m ch\u1eadm VPS kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>V\u1edbi c\u00f4ng ngh\u1ec7 ph\u1ea7n c\u1ee9ng v\u00e0 ph\u1ea7n m\u1ec1m hi\u1ec7n \u0111\u1ea1i, t\u00e1c \u0111\u1ed9ng c\u1ee7a t\u01b0\u1eddng l\u1eeda d\u1ef1a tr\u00ean host (nh\u01b0 UFW, CSF) l\u00ean hi\u1ec7u su\u1ea5t c\u1ee7a VPS l\u00e0 kh\u00f4ng \u0111\u00e1ng k\u1ec3 \u0111\u1ed1i v\u1edbi h\u1ea7u h\u1ebft c\u00e1c \u1ee9ng d\u1ee5ng. L\u1ee3i \u00edch v\u1ec1 m\u1eb7t b\u1ea3o m\u1eadt m\u00e0 t\u01b0\u1eddng l\u1eeda mang l\u1ea1i l\u1edbn h\u01a1n r\u1ea5t nhi\u1ec1u so v\u1edbi b\u1ea5t k\u1ef3 s\u1ef1 s\u1ee5t gi\u1ea3m hi\u1ec7u su\u1ea5t nh\u1ecf n\u00e0o c\u00f3 th\u1ec3 x\u1ea3y ra.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nen-mo-nhung-port-nao-cho-mot-website-WordPress\"><\/span>N\u00ean m\u1edf nh\u1eefng port n\u00e0o cho m\u1ed9t website WordPress?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ed1i v\u1edbi m\u1ed9t trang web <a href=\"https:\/\/interdata.vn\/blog\/wordpress-la-gi\/\">WordPress<\/a> ti\u00eau chu\u1ea9n, b\u1ea1n c\u1ea7n m\u1edf \u00edt nh\u1ea5t c\u00e1c c\u1ed5ng sau:<\/p>\n<ul>\n<li><strong>80 (HTTP):<\/strong> Cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp trang web c\u1ee7a b\u1ea1n qua giao th\u1ee9c kh\u00f4ng m\u00e3 h\u00f3a.<\/li>\n<li><strong>443 (HTTPS):<\/strong> Cho ph\u00e9p truy c\u1eadp an to\u00e0n, m\u00e3 h\u00f3a (y\u00eau c\u1ea7u c\u00f3 <a href=\"https:\/\/interdata.vn\/blog\/chung-chi-ssl\/\">ch\u1ee9ng ch\u1ec9 SSL<\/a>).<\/li>\n<li><strong>22 (SSH):<\/strong> \u0110\u1ec3 b\u1ea1n c\u00f3 th\u1ec3 qu\u1ea3n tr\u1ecb VPS.<\/li>\n<li>B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 c\u1ea7n m\u1edf c\u1ed5ng cho FTP\/SFTP (21\/22) n\u1ebfu b\u1ea1n d\u00f9ng ph\u01b0\u01a1ng th\u1ee9c n\u00e0y \u0111\u1ec3 t\u1ea3i file l\u00ean.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Vi\u1ec7c v\u1eadn h\u00e0nh m\u1ed9t m\u00e1y ch\u1ee7 \u1ea3o (VPS) m\u00e0 kh\u00f4ng c\u00f3 l\u1edbp b\u1ea3o v\u1ec7 v\u1eefng ch\u1eafc c\u0169ng gi\u1ed1ng nh\u01b0 \u0111\u1ec3 ng\u1ecf c\u1eeda nh\u00e0 b\u1ea1n. C\u00e1c m\u1ed1i \u0111e d\u1ecda t\u1ef1 \u0111\u1ed9ng nh\u01b0 botnet li\u00ean t\u1ee5c qu\u00e9t internet \u0111\u1ec3 t\u00ecm ki\u1ebfm nh\u1eefng h\u1ec7 th\u1ed1ng d\u1ec5 b\u1ecb t\u1ed5n th\u01b0\u01a1ng. Vi\u1ec7c thi\u1ebft l\u1eadp t\u01b0\u1eddng l\u1eeda l\u00e0 b\u01b0\u1edbc \u0111i c\u01a1<\/p>\n","protected":false},"author":2,"featured_media":31760,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-31759","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-vps"],"_links":{"self":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/31759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/comments?post=31759"}],"version-history":[{"count":1,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/31759\/revisions"}],"predecessor-version":[{"id":31766,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/31759\/revisions\/31766"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media\/31760"}],"wp:attachment":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media?parent=31759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/categories?post=31759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/tags?post=31759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}