This is a little plugin that I came across today. Nothing new, but after using it, there’s no way I would setup a cpanel/whm server without it.
ConfigServer Security & Firewall (csf)
This is essentially an extension of iptables firewall that integrates with a nice GUI in the WHM interface. It makes configuring the server’s firewall a snap, and also suggests other security fixes based on how your server is setup.
The installation took about 5 minutes to complete and another half hour to fully configure. You will need ssh or other shell access to install it on a server. This is an absolute necessity for any server. I only wish I would have found it a long time ago, as it is a huge time-saver.
Source