I want to install a firewall on centOS 6

Issues related to applications and software problems
User avatar
jlehtone
Posts: 4530
Joined: 2007/12/11 08:17:33
Location: Finland

Re: I want to install a firewall on centOS 6

Post by jlehtone » 2019/10/24 18:24:40

imadeira wrote:
2019/10/24 11:11:18
I mentioned the networks 192.168.0.64/26 and 192.168.1.0/24 and my server is not connected to these networks, how do I get it to connect to these networks?
A router is a machine that is connected to more than one network and forwards traffic between connected networks.

Are there any routers in RedeA? Are there any routers in RedeB? (We don't count your server, because it is connected at most to RedeA and RedeB.)
imadeira wrote:
2019/10/24 11:11:18
I have not defined any routes yet those routes that I showed, after executing the command: #ip ro, are the default ones.
Link-local routes appear quite automatically. The default route is due to config.
imadeira wrote:
2019/10/24 11:11:18
allow RedeB source traffic to ip 192.168.1.209 only
You have repeated that phrase several times. What does it mean? What is "source traffic"?
imadeira wrote:
2019/10/24 11:11:18
(all ports in the first phase send the necessary ports later on this route);
You have repeated that phrase several times. What does it mean?
imadeira wrote:
2019/10/24 11:11:18
Management of the firewall should only be possible from network 192.168.0.64/26 and network 192.168.1.0/24.
Those rules are easy:
Allow access to port tcp/22 (ssh) from networks 192.168.0.64/26 and 192.168.1.0/24

That is more strict than the default of allowing to tcp/22 from anywhere.
Furthermore, we don't even know where those networks are. We should not need to care about that, but if you restrict ssh access now, then you cannot ssh into the server at all.
imadeira wrote:
2019/10/24 13:12:38
iptables 0: no 1: no 2: yes 3: yes 4: yes 5: yes 6: no.
What does it mean?
The service iptables is enabled. If the machine really has 0 rules (or the rules added by you) after reboot, then you have wiped out the default rules.
That would be ok, if you would know that you don't need them and that the rules you add are proper. You don't.

Admittedly UFW or similar could protect you from some mistakes, but they can't resolve your basic network configuration errors.


It would be really good if you could hire professional help.

Whoever
Posts: 1361
Joined: 2013/09/06 03:12:10

Re: I want to install a firewall on centOS 6

Post by Whoever » 2019/10/25 01:51:03

imadeira wrote:
2019/10/24 13:12:38
I ran the command: sudo / sbin / chkconfig --list iptables, and suggested the following:
iptables 0: no 1: no 2: yes 3: yes 4: yes 5: yes 6: no.
What does it mean?

Search on Google for "linux runlevels". Those numbers correspond to the various runlevels.

imadeira
Posts: 30
Joined: 2019/08/21 19:28:43

Re: I want to install a firewall on centOS 6

Post by imadeira » 2019/10/25 09:43:08

Hello, give me this task for me to perform, with those rules to implement, and I will have to do it badly or well, with the help here of the forum or without help. I won't resort to any professional help, because I can't. I always thought that exposing the task / problem could help me, I was really counting on your help. I was waiting for you to help me define the rules and routes of my firewall ...

Whoever
Posts: 1361
Joined: 2013/09/06 03:12:10

Re: I want to install a firewall on centOS 6

Post by Whoever » 2019/10/26 01:53:48

imadeira wrote:
2019/10/25 09:43:08
Hello, give me this task for me to perform, with those rules to implement, and I will have to do it badly or well, with the help here of the forum or without help. I won't resort to any professional help, because I can't. I always thought that exposing the task / problem could help me, I was really counting on your help. I was waiting for you to help me define the rules and routes of my firewall ...
It sounds like you want profession help, for free. It sounds like you can't be bothered to learn about the problem.

Plenty of information has been given. You need to do some research so that you can understand basic networking and iptables.

User avatar
TrevorH
Site Admin
Posts: 33215
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: I want to install a firewall on centOS 6

Post by TrevorH » 2019/10/26 11:27:03

Also... you're messsing with security and don't really have a full understanding of what you are doing. The mix of those two things results in danger.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply