RHEL Firewall

[Tonatiuh]

I have servers with Red Hat enterprise Linux 3 and 4.

I did not configure the firewall at the installation time.

Can I configureit now? I want to restrict that the server only receive comunications from certain IP and certain Port.

Can I restrict the communications to this server in this way?

[Stuart Browne]

Sure you can do it now.

You can either do it manually by learning how to use the 'iptables' tools, or if you just want a quick fix (and have access to an X server), then you can use 'redhat-configure-securitylevel'.

[Gopi Sekar]

if you are a commandline fan, then check the man page of iptables and there are very good documentation available on the net for this. The very basic guide can be found by 'man iptables'


if you are a GUI fan then as stuart mentioned, redhat-config-securitylevel would help. There are free opensource GUI tools also available which can do the same.

Regards,
Gopi

[Bejoy C Alias]

Install webmin and use a web browser to access all of the confiuration of ur machine by http://ipaddr:10000 . U can easily manage ur firewall using webmin interface.

[Tvs]

hai

it is possible

you can install linux with firewall. later if you want you can activate the firewall with iptabel command. and u can meet u r requirment by iptables

[Ivan Ferreira]

You can do it using the methods described before, and you can also use the rc.firewall script available at sourceforge.net.

But, before doing firewall configuration, make sure you fully understand how the tcp traffic works. A bad configured firewall may cause extrange behaviors, serices not responding, or a false security sensation.

[Steven E. Protter]

chkconfig --level 12345 iptables on
# that says that iptables is configured and running at boot time.
service iptables start

# This will start iptables.

The fun part is actually deciding to have and create a firewall policy. There are lots of good threads on that in the itrc database.

SEP

[Ivan Ferreira]

You can also, take a look to Shorewall:

http://www.shorewall.net/