Red Hat SATELLITE 5.1.0 RELEASE NOTES Manual de instalación Pagina 180
- Pagina / 268
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
162 The Virtualization Cookbook for Red Hat Enterprise Linux 5.2
Verify that the firewall is off using the chkconfig --list command. The service name is
iptables:
# chkconfig --list iptables
iptables 0:off 1:off 2:off 3:off 4:off 5:off 6:off
Turn on the firewall at boot time with the chkconfig command, and for this session with the
service command:
# chkconfig iptables on
# service iptables start
Applying iptables firewall rules: [ OK ]
Loading additional iptables modules: ip_conntrack_netbios_ns [ OK ]
Go back to your browser and click refresh. You should get an error that the server is not
responding. This is because packets for ports for http: and https: (80 and 443) are dropped by
default.
To allow Web traffic through, you can modify the file /etc/sysconfig/iptables. First make a
backup copy, add two rules (shown in bold font) to allow these ports, and then save your
changes:
# cd /etc/sysconfig
# cp iptables iptables.orig
# vi iptables
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
Restart the firewall to pick up the new rules:
# service iptables restart
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: filter [ OK ]
Unloading iptables modules: [ OK ]
Applying iptables firewall rules: [ OK ]
Loading additional iptables modules: ip_conntrack_netbios_ns [ OK ]
Go back to your browser and click refresh again. You should not get an error this time. You
should now have a firewall that allows Web traffic.
- The Virtualization Cookbook 1
- Linux 5.2 3
- October 2008 3
- First Edition (October 2008) 4
- Contents 5
- Contents v 7
- Contents vii 9
- Trademarks 12
- The team that wrote this book 13
- Chapters and appendixes 15
- Conventions 17
- Comments welcome 17
- 1.1 What is virtualization 20
- 1.2 This book’s approach 21
- 1.4 Infrastructure design 22
- Planning 25
- 2.1 Bill of materials 26
- 2.2 z/VM conventions 27
- 2.3 Disk planning 28
- DASD versus SCSI/FCP 29
- 3390-3s versus 3390-9s 29
- Disk storage per Linux image 29
- 2.4 Memory planning 30
- 2.5 Password planning 30
- 2.6 Planning worksheets 31
- 2.7 Blank worksheets 34
- 2.7.2 z/VM DASD worksheet 35
- Configuring a desktop machine 37
- Figure 3-2 Setting logging 39
- Saving sessions 41
- 3.2 Setting up a VNC client 42
- 3.3 3270 emulators 43
- 4.1 Installing z/VM from DVD 46
- ==> instplan 50
- Running INSTDVD 52
- Figure 4-8 Load window 53
- ==> cold drain noautolog 54
- ==> no 54
- ==> disc 54
- 4.2 Configuring TCP/IP 56
- not specified 62
- 4.6 Adding paging volumes 65
- Using the CPFORMAT EXEC 67
- 4.6.4 Testing the changes 71
- 4.8.2 Testing the changes 78
- 4.9.1 VM security products 79
- ==> sampnss cms 86
- Servicing z/VM 89
- 5.1 Applying a PTF 90
- 6.4 Enabling the NFS server 106
- 7.2.3 Configuring VDISK swap 128
- 7.2.4 Configuring yum 128
- 7.2.5 Adding additional RPMs 129
- 7.2.10 Configuring SSH keys 134
- 4 6763) is running 135
- 8.2.4 Adding additional RPMs 145
- 8.2.8 Configuring SSH keys 145
- 8.2.9 Rebooting the system 146
- 8.2.10 Verifying the changes 146
- Detach the source disks 151
- Detach the target disks 154
- IPL the target system 154
- 9.3.2 Using the clone script 157
- FLASHCOPY 159
- Installation Server 159
- Master Image 159
- 9.5 Reviewing system status 163
- LNXMAINT 164
- Delete these 167
- Servicing Linux with Red Hat 171
- 12.1.2 Testing Apache 179
- 12.1.3 Turning on a firewall 179
- 12.1.6 Apache resources 182
- Start the LDAP service 184
- Deleting duplicate users 186
- Set a password 189
- 12.3.4 Adding a Samba user 191
- 12.3.6 Testing your changes 192
- 12.3.7 Configuring printing 193
- 12.4.1 Additional resources 194
- Linux kernel development 195
- Web development 195
- Miscellaneous recipes 197
- 13.1 Adding a logical volume 198
- Volume Group - optvg 200
- Creating a physical volume 204
- Extending the volume group 204
- /var/lib/ldap 205
- Configuring LDAP 206
- Configuring automount 207
- 13.4 Rescuing a Linux system 208
- Monitoring z/VM and Linux 211
- INIDICATE LOAD 212
- INDICATE QUEUES EXP 213
- Getting help 214
- Determining who is logged on 214
- Determining storage or memory 215
- Determining software level 215
- 14.2.3 Configuring PERFSVM 218
- Using a Web browser interface 220
- Using a 3270 interface 222
- 14.3 Monitoring Linux 223
- PURGE NSS NAME MONDCSS 228
- CP SAVESEG MONDCSS 228
- References 229
- Quick reference sheets 230
- Prefix commands 231
- :help give help 232
- Appendix B. z/VM source code 233
- The CPFORMAT EXEC 234
- The CHPW540 XEDIT macro 238
- The LABEL540 EXEC 241
- The LABEL540 XEDIT macro 243
- Linux source code 245
- Related publications 257
- Online resources 258
- How to get Redbooks 258
- Help from IBM 258
- Hat Enterprise Linux 5.2 265
Relacionado con productos y manuales para Software Red Hat SATELLITE 5.1.0 RELEASE NOTES
(110 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.064 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales