CentOS7 firewall?
-
@anonymous said:
@MattSpeller I was doing a minimal install from the minimal install media. Regardless, you should get the same result if you do a minimal install from the DVD media. You do not, and this makes me a sad panda.
Once I figure out how to get the package lists I will get the differences for you.
-
-
@anonymous said:
yum list installed >> listThis works, I just tried it to make sure
[root@testcos7dvd ~]# diff listdvd listmin 5d4 < NetworkManager-team.x86_64 1:1.0.6-27.el7 @anaconda 6a6 > NetworkManager-wifi.x86_64 1:1.0.6-27.el7 @anaconda 61d60 < ebtables.x86_64 2.0.10-13.el7 @anaconda 74d72 < firewalld.noarch 0.3.9-14.el7 @anaconda 124,125d121 < iwl7265-firmware.noarch 22.0.7.0-43.el7 @anaconda < jansson.x86_64 2.4-6.el7 @anaconda 170d165 < libnl3-cli.x86_64 3.2.21-10.el7 @anaconda 177d171 < libselinux-python.x86_64 2.2.2-6.el7 @anaconda 185d178 < libsysfs.x86_64 2.1.0-16.el7 @anaconda 187d179 < libteam.x86_64 1.17-5.el7 @anaconda 259,260d250 < python-slip.noarch 0.4.0-2.el7 @anaconda < python-slip-dbus.noarch 0.4.0-2.el7 @anaconda 264d253 < rdma.noarch 7.2_4.1_rc6-1.el7 @anaconda 289d277 < teamd.x86_64 1.17-5.el7 @anaconda [root@testcos7dvd ~]# -
The Minimal ISO contains this not in the DVD ISO
NetworkManager-wifi.x86_64 1:1.0.6-27.el7The DVD ISO contains all of these not in the Minimal ISO.
NetworkManager-team.x86_64 1:1.0.6-27.el7
ebtables.x86_64 2.0.10-13.el7
firewalld.noarch 0.3.9-14.el7
iwl7265-firmware.noarch 22.0.7.0-43.el7
jansson.x86_64 2.4-6.el7
libnl3-cli.x86_64 3.2.21-10.el7
libselinux-python.x86_64 2.2.2-6.el7
libsysfs.x86_64 2.1.0-16.el7
libteam.x86_64 1.17-5.el7
python-slip.noarch 0.4.0-2.el7
python-slip-dbus.noarch 0.4.0-2.el7
rdma.noarch 7.2_4.1_rc6-1.el7
teamd.x86_64 1.17-5.el7 -
Installing firewalld catches a bunch of those.
[root@testcos7 ~]# yum install firewalld Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.sanctuaryhost.com * extras: mirror-centos.hostingswift.com * updates: mirror.nexcess.net Resolving Dependencies --> Running transaction check ---> Package firewalld.noarch 0:0.3.9-14.el7 will be installed --> Processing Dependency: python-slip-dbus for package: firewalld-0.3.9-14.el7.noarch --> Processing Dependency: ebtables for package: firewalld-0.3.9-14.el7.noarch --> Running transaction check ---> Package ebtables.x86_64 0:2.0.10-13.el7 will be installed ---> Package python-slip-dbus.noarch 0:0.4.0-2.el7 will be installed --> Processing Dependency: python-slip = 0.4.0-2.el7 for package: python-slip-dbus-0.4.0-2.el7.noarch --> Running transaction check ---> Package python-slip.noarch 0:0.4.0-2.el7 will be installed --> Processing Dependency: libselinux-python for package: python-slip-0.4.0-2.el7.noarch --> Running transaction check ---> Package libselinux-python.x86_64 0:2.2.2-6.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================================================================ Package Arch Version Repository Size ================================================================================================================================ Installing: firewalld noarch 0.3.9-14.el7 base 476 k Installing for dependencies: ebtables x86_64 2.0.10-13.el7 base 122 k libselinux-python x86_64 2.2.2-6.el7 base 247 k python-slip noarch 0.4.0-2.el7 base 30 k python-slip-dbus noarch 0.4.0-2.el7 base 31 k Transaction Summary ================================================================================================================================ Install 1 Package (+4 Dependent packages) Total download size: 907 k Installed size: 3.5 M Is this ok [y/d/N]: -
Then it all works.
[root@testcos7 ~]# systemctl start firewalld [root@testcos7 ~]# systemctl enable firewalld [root@testcos7 ~]# -
So if you follow my guides, you will simply need to add
yum -y install firewalldor addfirewalldto one of the existing lines where i install packages.and then add the start and enable commands also.
yum -y install firewalld systemctl enable firewalld systemctl start firewalld -
That is annoying as f[moderated] though.
-
@JaredBusch Agreed!
-
@JaredBusch said:
The Minimal ISO contains this not in the DVD ISO
NetworkManager-wifi.x86_64 1:1.0.6-27.el7The DVD ISO contains all of these not in the Minimal ISO.
NetworkManager-team.x86_64 1:1.0.6-27.el7
ebtables.x86_64 2.0.10-13.el7
firewalld.noarch 0.3.9-14.el7
iwl7265-firmware.noarch 22.0.7.0-43.el7
jansson.x86_64 2.4-6.el7
libnl3-cli.x86_64 3.2.21-10.el7
libselinux-python.x86_64 2.2.2-6.el7
libsysfs.x86_64 2.1.0-16.el7
libteam.x86_64 1.17-5.el7
python-slip.noarch 0.4.0-2.el7
python-slip-dbus.noarch 0.4.0-2.el7
rdma.noarch 7.2_4.1_rc6-1.el7
teamd.x86_64 1.17-5.el7Why would they include WiFi in the minimal? That doesn't seem to make any sense.
-
@johnhooks said:
@JaredBusch said:
The Minimal ISO contains this not in the DVD ISO
NetworkManager-wifi.x86_64 1:1.0.6-27.el7The DVD ISO contains all of these not in the Minimal ISO.
NetworkManager-team.x86_64 1:1.0.6-27.el7
ebtables.x86_64 2.0.10-13.el7
firewalld.noarch 0.3.9-14.el7
iwl7265-firmware.noarch 22.0.7.0-43.el7
jansson.x86_64 2.4-6.el7
libnl3-cli.x86_64 3.2.21-10.el7
libselinux-python.x86_64 2.2.2-6.el7
libsysfs.x86_64 2.1.0-16.el7
libteam.x86_64 1.17-5.el7
python-slip.noarch 0.4.0-2.el7
python-slip-dbus.noarch 0.4.0-2.el7
rdma.noarch 7.2_4.1_rc6-1.el7
teamd.x86_64 1.17-5.el7Why would they include WiFi in the minimal? That doesn't seem to make any sense.
Agreed.
-
The full DVD says it installing 297 packages, which I think is the same number the minimal says it's installing?
-
@anonymous said:
The full DVD says it installing 297 packages, which I think is the same number the minimal says it's installing?
No idea? I did not check. I do the install from the GUI
-
@JaredBusch The GUI says how many packages it installing
-
@anonymous said:
@JaredBusch The GUI says how many packages it installing
What when you watch it? I don't stare at it.
-
btw, on the DVD ISO this is what I chose when I say I did a minimal from the DVD. It is the default choice.
-
@anonymous said:
So I guess the lesson I learned is always use the full DVD???
Or just know which packages you need to install.
-
@JaredBusch said:
That is annoying as f[moderated] though.
Seriously, that is ridiculous. I wonder how they missed that.
-
@JaredBusch said:
@johnhooks said:
@MattSpeller said:
@anonymous said:
@MattSpeller How?
I don't see one posted on their site actually.... very odd
Since it's a torrent it's probably included in the folder.
Yes. right here
really? you trust what's included? That doesn't seem very secure.
-
@Dashrender said:
@JaredBusch said:
@johnhooks said:
@MattSpeller said:
@anonymous said:
@MattSpeller How?
I don't see one posted on their site actually.... very odd
Since it's a torrent it's probably included in the folder.
Yes. right here
really? you trust what's included? That doesn't seem very secure.
Of course. it is no different than trusting the website itself. Both could be hijacked if you are that paranoid about it.
