Firewall Configuration in Linux in Centos 6.2
-
Just as important, or moreso, than a firewall is patching that system. That system is years without patches. It is a VERY dangerous system that you have there.
-
@Lakshmana said:
@thecreativeone91 Ok all.How to design the Firewall block diagram?I need to do basic firewall in Centos and how to do?
Never done a block diagram for a firewall. Just need a list of the ports that are needed.
-
@scottalanmiller I need to configure basic firewall by opening SSH and Ping ports only.
-
Install Fail2Ban as well.
-
@thanksajdotcom said:
Install Fail2Ban as well.
Good advice. Fail2Ban is excellent. It automates some important firewall tasks.
-
@thanksajdotcom I need to do in IPtables only for the configuration for the firewall at linux OS(Centos)
-
@Lakshmana said:
@scottalanmiller I need to configure basic firewall by opening SSH and Ping ports only.
Ping does not use a part. It is not part of either TCP or UDP but of ICMP which is portless.
-
@StrongBad How to do a block diagram for designing the Firewall?
-
@Lakshmana said:
@StrongBad How to do a block diagram for designing the Firewall?
What do you mean? You need to know which ports to have open, whether that's 80 (HTTP), 22 (SSH), 443 (HTTPS) or what, and then you do a deny all at the bottom, which basically says that if you didn't open it, it's blocked.
-
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
-
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
As @StrongBad said, ping doesn't have a port. It's ICMP as the traffic type, so it doesn't use a TCP or UDP port. It should be good to go already.
-
@thanksajdotcom said:
s ICMP as the traffic typ
OK but how can i make the other system in the same network as well as other network to be easily ping the system. -
ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?
-
@Lakshmana said:
@thanksajdotcom said:
s ICMP as the traffic typ
OK but how can i make the other system in the same network as well as other network to be easily ping the system.If they're on the same network, you don't have to do anything to enable it. Just type ping ip.of.the.device or the hostname.
-
@StrongBad said:
ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?
Exactly. You're freaking out about enabling them when they are enabled by default, so unless you did something SPECIFIC TO DISABLE THEM, they are already working.
-
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
Port 22 is open by default as well. How did these get closed?
-
@thanksajdotcom So now I have to use only SSH as open to use the protocol.How to do block diagram?
-
@StrongBad said:
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
Port 22 is open by default as well. How did these get closed?
Exactly. Especially if this is a server, you shouldn't have a GUI by default, meaning you MUST have SSH access as it is.
-
Maybe you should provide us the output of your IPTables configuration file. Then we can tell you what to change. Not sure how else to help.
-
@Lakshmana said:
@thanksajdotcom So now I have to use only SSH as open to use the protocol.How to do block diagram?
Again, I have no idea what you're talking about. SSH should already be open. Ping should already be open. Have you tried actually using either to make sure they work before you talk about getting them to work? Please try pinging and SSHing into your devices and paste the output here. Until you do that, we can't help you any further.
