Firewall Configuration in Linux in Centos 6.2
-
@thanksajdotcom said:
Install Fail2Ban as well.
Good advice. Fail2Ban is excellent. It automates some important firewall tasks.
-
@thanksajdotcom I need to do in IPtables only for the configuration for the firewall at linux OS(Centos)
-
@Lakshmana said:
@scottalanmiller I need to configure basic firewall by opening SSH and Ping ports only.
Ping does not use a part. It is not part of either TCP or UDP but of ICMP which is portless.
-
@StrongBad How to do a block diagram for designing the Firewall?
-
@Lakshmana said:
@StrongBad How to do a block diagram for designing the Firewall?
What do you mean? You need to know which ports to have open, whether that's 80 (HTTP), 22 (SSH), 443 (HTTPS) or what, and then you do a deny all at the bottom, which basically says that if you didn't open it, it's blocked.
-
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
-
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
As @StrongBad said, ping doesn't have a port. It's ICMP as the traffic type, so it doesn't use a TCP or UDP port. It should be good to go already.
-
@thanksajdotcom said:
s ICMP as the traffic typ
OK but how can i make the other system in the same network as well as other network to be easily ping the system. -
ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?
-
@Lakshmana said:
@thanksajdotcom said:
s ICMP as the traffic typ
OK but how can i make the other system in the same network as well as other network to be easily ping the system.If they're on the same network, you don't have to do anything to enable it. Just type ping ip.of.the.device or the hostname.
-
@StrongBad said:
ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?
Exactly. You're freaking out about enabling them when they are enabled by default, so unless you did something SPECIFIC TO DISABLE THEM, they are already working.
-
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
Port 22 is open by default as well. How did these get closed?
-
@thanksajdotcom So now I have to use only SSH as open to use the protocol.How to do block diagram?
-
@StrongBad said:
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
Port 22 is open by default as well. How did these get closed?
Exactly. Especially if this is a server, you shouldn't have a GUI by default, meaning you MUST have SSH access as it is.
-
Maybe you should provide us the output of your IPTables configuration file. Then we can tell you what to change. Not sure how else to help.
-
@Lakshmana said:
@thanksajdotcom So now I have to use only SSH as open to use the protocol.How to do block diagram?
Again, I have no idea what you're talking about. SSH should already be open. Ping should already be open. Have you tried actually using either to make sure they work before you talk about getting them to work? Please try pinging and SSHing into your devices and paste the output here. Until you do that, we can't help you any further.
-
@StrongBad I did not configured IP table.I need to configure IP table tommorow only.I dont know how to configure Iptable any link anyone provide.
-
@Lakshmana said:
@StrongBad I did not configured IP table.I need to configure IP table tommorow only.I dont know how to configure Iptable any link anyone provide.
What do you need to configure it for? What is your purpose of configuring IPTables? It sounds like you want to know how to do something without a clearly defined objective of what you actually need to do. What is your purpose in configuring IPTables?
-
@thanksajdotcom I need to configure basic firewall in Linux OS and to test the ports are working from the WAN to LAN after configuring the firewall.This is my objective
-
This is what we need:
cat /etc/sysconfig/iptables
