topic LINUX 8 Security in Operating System - Linux

LINUX 8 Security

Nobody's Hero — Thu, 24 Apr 2003 14:21:42 GMT

I installed Linux 8 and I am a novice at Linux,not HP-UX. I am trying to disable the firewall settings because I can not telnet or ftp etc... When I run setup, I select the appropriate setting to disable it and when I look at it again it is set back to high. Any help appreciated........

RPM

Re: LINUX 8 Security

Francisco J. Soler — Thu, 24 Apr 2003 15:42:59 GMT

Hi,

Trie to remove the files /etc/sysconfig/iptables and /etc/sysconfig/ipchains.

Another solutios could be:

chkconfig --list iptables
chkconfig --list ipchains

see what levels ipchains and iptables are on, then

chkconfig --level xx ipchains off
chkconfig --level xx iptables off

where xx are the levels (one digit for level, two x means two diferent levels)

Frank

Re: LINUX 8 Security

Balaji N — Fri, 25 Apr 2003 02:56:37 GMT

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x955cb82b2d63d71190080090279cd0f9,00.html

see this post. by default the gui shows the settings as high.

i would suggest you to customize the firewall to allow incoming ftp /ssh requests and stop using telnet.

-balaji

Re: LINUX 8 Security

Andrew Cowan — Fri, 25 Apr 2003 05:13:23 GMT

Is xinetd running? I think that it is disabled by default in most Linux distros in which case the daemons are not listening.

Re: LINUX 8 Security

Bauder, Alexander — Fri, 25 Apr 2003 05:15:03 GMT

Hello Robert,

I had the same problem, but it was not the firewall. xinetd wasn??t configured properly.

Check:

/etc/xinetd.d/telnet or so.

You have to change "disable = yes" into "disable = no" and restart xinetd.

Then ftp etc. is allowed.

Greethings,

Alexander Bauder

Re: LINUX 8 Security

Stuart Browne — Mon, 28 Apr 2003 01:18:14 GMT

Yes, it could be the firewall.

The chkconfig commands listed above should help you turn it off for a next restart. You might also just want to 'service ipchains stop' and 'service iptables stop' to stop the existing settings.

It could, however, be two simpler things.

1) Appropriate service binaries are not installed (unless you did a server isntall, this is the most probable). The telnet service is installed with the package 'telnet-server' (rpm -q telnet-server) and the FTP server is vsftpd (rpm -q vsftpd).

2) The service isn't enabled. This is the default behaviour out of the box. Using the 'chkconfig' command again, you can check to see if they are enabled or not ('chkconfig --list vsftpd' and 'chkconfig --list telnet').