
and place all custom rules in this chain. Please refer to the Red Hat Security Guide
1
for
more information on using iptables
IP Port Number Protocol Component
4545 TCP / UDP RHN Monitoring Funcionality
5222 TCP / UDP RHN Push Functionality
22 TCP / UDP Secure Shell Access
80 TCP / UDP HyperText Transport Protocol
443 TCP / UDP HyperText Transport Protocol over TLS / SSL
Table 8: Iptables for Satellite Server
# ./firewall-config.sh
Please put the ports you would like to firewall here, separated by a space:
80 443 50007 50006 50008 50009 21064 11111 5404 5405
Please put the protocols you would like to firewall here, separated by a
space:
tcp udp
iptables --append RHCF --protocol tcp --destination-port 80 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 443 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 50007 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 50006 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 50008 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 50009 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 21064 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 11111 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 5404 --jump ACCEPT
iptables --append RHCF --protocol tcp --destination-port 5405 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 80 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 443 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 50007 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 50006 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 50008 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 50009 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 21064 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 11111 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 5404 --jump ACCEPT
iptables --append RHCF --protocol udp --destination-port 5405 --jump ACCEPT
Remember to "service iptables save"
1 http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/96/html/Security_Guide/index.html
www.redhat.com 38
Comentarios a estos manuales