Firewall Configuration in Linux in Centos 6.2
-
What are the things to be asked to the customer for configuring the firewall in Linux System with CentOS 6.2? How to do ask what are the need for the customer to configure the firewall in Linux system?
-
The only things you would typically ask are... what ports do they need open. Typically customers know nothing of firewalls and cannot be asked these questions, though. If the customer knew what needed to be configured, they would configure it themselves.
-
Most likely they won't know and you'll only find out when something breaks. You could take a proactive approach and see what's installed on the system and ask if they are using it.
-
netstat -tulpn tells you a lot.
-
@thecreativeone91 Ok all.How to design the Firewall block diagram?I need to do basic firewall in Centos and how to do?
-
Just as important, or moreso, than a firewall is patching that system. That system is years without patches. It is a VERY dangerous system that you have there.
-
@Lakshmana said:
@thecreativeone91 Ok all.How to design the Firewall block diagram?I need to do basic firewall in Centos and how to do?
Never done a block diagram for a firewall. Just need a list of the ports that are needed.
-
@scottalanmiller I need to configure basic firewall by opening SSH and Ping ports only.
-
Install Fail2Ban as well.
-
@thanksajdotcom said:
Install Fail2Ban as well.
Good advice. Fail2Ban is excellent. It automates some important firewall tasks.
-
@thanksajdotcom I need to do in IPtables only for the configuration for the firewall at linux OS(Centos)
-
@Lakshmana said:
@scottalanmiller I need to configure basic firewall by opening SSH and Ping ports only.
Ping does not use a part. It is not part of either TCP or UDP but of ICMP which is portless.
-
@StrongBad How to do a block diagram for designing the Firewall?
-
@Lakshmana said:
@StrongBad How to do a block diagram for designing the Firewall?
What do you mean? You need to know which ports to have open, whether that's 80 (HTTP), 22 (SSH), 443 (HTTPS) or what, and then you do a deny all at the bottom, which basically says that if you didn't open it, it's blocked.
-
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
-
@Lakshmana said:
@thanksajdotcom I need to open Port number 22 (SSH),and also Ping.I need to do the block diagram to design the process?
As @StrongBad said, ping doesn't have a port. It's ICMP as the traffic type, so it doesn't use a TCP or UDP port. It should be good to go already.
-
@thanksajdotcom said:
s ICMP as the traffic typ
OK but how can i make the other system in the same network as well as other network to be easily ping the system. -
ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?
-
@Lakshmana said:
@thanksajdotcom said:
s ICMP as the traffic typ
OK but how can i make the other system in the same network as well as other network to be easily ping the system.If they're on the same network, you don't have to do anything to enable it. Just type ping ip.of.the.device or the hostname.
-
@StrongBad said:
ICMP (Ping and TraceRoute) should be enabled by default. Have you tested them to see if they are already blocked?
Exactly. You're freaking out about enabling them when they are enabled by default, so unless you did something SPECIFIC TO DISABLE THEM, they are already working.
