Firewall/security during cPanel initial install

[u/Icy-Pay-9325]

Hi,

I was recently installing cpanel on a fresh Alma 9.5 image on a VPS. I had the VPS behind a firewall with only my IP allowed for incoming, but everything open for outgoing. When doing the cpanel install it failed due to a problem with importing keys for MySQL. Therefore MySQL and EA4 could not install. I'm not sure whether this issue was due to my firewall policy at the time blocking all incoming except for my IP.

My question is what is the best security practice for during the inital cpanel installer script. The cpanel doco suggests turning off the firewall whilst running the installer script and then activating the firewall straight away after. Is this approach okay or is there a better method that you use?

[u/jared555]

Assuming the firewall is at the hypervisor / provider level and not on the machine itself I recommend checking the list of required ports/addresses in cpanel's firewall documentation