Port reservation for WebShield in the system

Issue

Is it possible to reserve ports for WebShield, so that other services in the system do not pick them?

Environment

• Imunify360
• WebShield
• Any supported OS
• Any supported panel

Solution

The corresponding configuration responsible for the port reserve is available in the /etc/sysctl.d/90-webshield-ip-local-reserved.conf

# cat /etc/sysctl.d/90-webshield-ip-local-reserved.conf
# Reserve ports for webshield services
net.ipv4.ip_local_reserved_ports = 52223,52224,52227-52235

In case of problems or unexpected behavior, it may be necessary to reserve the entire port range (52220-52239). This can be done by using the commands:

# cat /proc/sys/net/ipv4/ip_local_reserved_ports
52223-52224,52227-52235
# echo '52220-52239' > /proc/sys/net/ipv4/ip_local_reserved_ports
# cat /proc/sys/net/ipv4/ip_local_reserved_ports
52220-52239

Useful links

• Imunify360 WebShield.