topic Re: linux firewall in Operating System - Linux

linux firewall

sujeet_3 — Thu, 14 Jul 2005 04:17:00 GMT

hello ,
our setup is cluster setup, we r having cluster ip is 10.30.x.198.Now we installed linux firewall with two nic one is 10.30.x.195 and second is our local ip 172.168.x.10 and we natted 10.30.247.198 to 172.168.10.8 this ip bidirectionally now our server cluster ip is in 172.168.x.8.MQ series is running on server but when we checked MQ Websphere queue channel it shows transmit channel running but receive channel inactive means from remotely our server is not accesible they accessing messaging port 1419 for reciving and transmiting.
please help me out how i will configure linux firewall?
pl tell me

Re: linux firewall

Stuart Browne — Thu, 14 Jul 2005 04:24:54 GMT

This sounds awfully like this thread:

http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=938891

What's the current FORWARD chain policy set like?

Re: linux firewall

sujeet_3 — Thu, 14 Jul 2005 06:58:20 GMT

i have tried that solutions but still my mqseries receiving channel is not getting online. as per your suggestion can all port will be opened because i required 1419 port to be opened bidirectionally

pl help me out

Re: linux firewall

Stuart Browne — Thu, 14 Jul 2005 07:43:23 GMT

Well, if you only need those two, first check to see if the FORWARD chain is blocking them, and it is, then allow them through.

If it's a DROP policy FORWARD chain, then either a policy change (depending on the environment) or specific rules to allow them through the interfaces will be required. i.e., for 1419:

iptables -I FORWARD 1 -j ACCEPT -p tcp --dport 1419
iptables -I FORWARD 2 -j ACCEPT -p tcp --sport 1419

roughly.. There are better ways, but it depends on your firewall policy, and whether you want stateful or stateless firewall's.