LINUX 8 Security

[Nobody's Hero]

I installed Linux 8 and I am a novice at Linux,not HP-UX. I am trying to disable the firewall settings because I can not telnet or ftp etc... When I run setup, I select the appropriate setting to disable it and when I look at it again it is set back to high. Any help appreciated........

RPM

[Francisco J. Soler]

Hi,

Trie to remove the files /etc/sysconfig/iptables and /etc/sysconfig/ipchains.

Another solutios could be:

chkconfig --list iptables
chkconfig --list ipchains

see what levels ipchains and iptables are on, then

chkconfig --level xx ipchains off
chkconfig --level xx iptables off

where xx are the levels (one digit for level, two x means two diferent levels)

Frank

[Balaji N]

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x955cb82b2d63d71190080090279cd0f9,00.html

see this post. by default the gui shows the settings as high.


i would suggest you to customize the firewall to allow incoming ftp /ssh requests and stop using telnet.

-balaji

[Andrew Cowan]

Is xinetd running? I think that it is disabled by default in most Linux distros in which case the daemons are not listening.

[Bauder, Alexander]

Hello Robert,

I had the same problem, but it was not the firewall. xinetd wasn??t configured properly.

Check:

/etc/xinetd.d/telnet or so.

You have to change "disable = yes" into "disable = no" and restart xinetd.

Then ftp etc. is allowed.

Greethings,

Alexander Bauder

[Stuart Browne]

Yes, it could be the firewall.

The chkconfig commands listed above should help you turn it off for a next restart. You might also just want to 'service ipchains stop' and 'service iptables stop' to stop the existing settings.

It could, however, be two simpler things.

1) Appropriate service binaries are not installed (unless you did a server isntall, this is the most probable). The telnet service is installed with the package 'telnet-server' (rpm -q telnet-server) and the FTP server is vsftpd (rpm -q vsftpd).

2) The service isn't enabled. This is the default behaviour out of the box. Using the 'chkconfig' command again, you can check to see if they are enabled or not ('chkconfig --list vsftpd' and 'chkconfig --list telnet').