CentOS7 firewall?
-
@johnhooks said:
@anonymous said:
@JaredBusch I see. But why would you decrease security out of the box? That seems strange to do....
The firewall is still there (iptables) they just removed the management interface for some reason.
I thought CentOS 7 used Firewalld and not IPTables?
-
@coliver said:
@johnhooks said:
@anonymous said:
@JaredBusch I see. But why would you decrease security out of the box? That seems strange to do....
The firewall is still there (iptables) they just removed the management interface for some reason.
I thought CentOS 7 used Firewalld and not IPTables?
I did too....
-
@coliver said:
@johnhooks said:
@anonymous said:
@JaredBusch I see. But why would you decrease security out of the box? That seems strange to do....
The firewall is still there (iptables) they just removed the management interface for some reason.
I thought CentOS 7 used Firewalld and not IPTables?
From what I've understood firewalld uses iptables, just makes it easier to manage. Kind of like ufw on Ubuntu.
-
@johnhooks said:
@coliver said:
@johnhooks said:
@anonymous said:
@JaredBusch I see. But why would you decrease security out of the box? That seems strange to do....
The firewall is still there (iptables) they just removed the management interface for some reason.
I thought CentOS 7 used Firewalld and not IPTables?
From what I've understood firewalld uses iptables, just makes it easier to manage. Kind of like ufw on Ubuntu.
It seems like they are two different applications but there isn't much info about it on the Fedora wiki.
https://fedoraproject.org/wiki/FirewallD?rd=FirewallD/#Dynamic_firewall_with_FirewallD
-
@anonymous said:
I thought CentOS7 was using firewalld, not iptables?
I've been out getting groceries but... firewalld uses iptables, doesn't replace it. Whenever I see firewalld, iptables is still there.
-
@scottalanmiller But it is no firewall is running by default
-
@anonymous said:
@JaredBusch Do you know of anyway to compare the two installs to see what packages are different? It would be interesting to know.
rpm -ql >> list
On each box. The do a
diffon the two lists. -
@anonymous said:
@scottalanmiller But it is no firewall is running by default
Ah, it is installed but not running.
-
@scottalanmiller Right, so basically your whole box is exposed right?
-
@coliver said:
@johnhooks said:
@coliver said:
@johnhooks said:
@anonymous said:
@JaredBusch I see. But why would you decrease security out of the box? That seems strange to do....
The firewall is still there (iptables) they just removed the management interface for some reason.
I thought CentOS 7 used Firewalld and not IPTables?
From what I've understood firewalld uses iptables, just makes it easier to manage. Kind of like ufw on Ubuntu.
It seems like they are two different applications but there isn't much info about it on the Fedora wiki.
https://fedoraproject.org/wiki/FirewallD?rd=FirewallD/#Dynamic_firewall_with_FirewallD
If you look at the project itself, they self describe as a management tool, not as a firewall.
-
@scottalanmiller said:
@anonymous said:
@scottalanmiller But it is no firewall is running by default
Ah, it is installed but not running.
no, it is not installed at all see my above screen shot..
-
@scottalanmiller said:
@coliver said:
@johnhooks said:
@coliver said:
@johnhooks said:
@anonymous said:
@JaredBusch I see. But why would you decrease security out of the box? That seems strange to do....
The firewall is still there (iptables) they just removed the management interface for some reason.
I thought CentOS 7 used Firewalld and not IPTables?
From what I've understood firewalld uses iptables, just makes it easier to manage. Kind of like ufw on Ubuntu.
It seems like they are two different applications but there isn't much info about it on the Fedora wiki.
https://fedoraproject.org/wiki/FirewallD?rd=FirewallD/#Dynamic_firewall_with_FirewallD
If you look at the project itself, they self describe as a management tool, not as a firewall.
That's what I was looking for. Thanks.
Ok right from their main page - apparently my Google Fu isn't very good today:
Support for iptables, ip6tables, ebtables firewall backends
-
@JaredBusch said:
no, it is not installed at all see my above screen shot..
He is talking about iptables...
-
And it is there in the minimal from DVD ISO.. So that is bad on CentOS for not having minimal be the same.
-
@JaredBusch Can you see what else is missing?
-
Need to know if I need to rebuild all my servers
-
So I guess the lesson I learned is always use the full DVD???
-
@JaredBusch said:
@scottalanmiller said:
@anonymous said:
@scottalanmiller But it is no firewall is running by default
Ah, it is installed but not running.
no, it is not installed at all see my above screen shot..
The firewall (iptables) is installed according to @anonymous screen shot. And on a new build from an hour ago that I am testing. But firewalld (the management tool) is not. But iptables won't start, which is the bigger problem. It looks like no scripts for starting it are installed.
-
@anonymous said:
So I guess the lesson I learned is always use the full DVD???
Or at least be really sure of whats on each version
-
@MattSpeller a minimal install should be minimal install regardless of media used.
