[clug] help network not working after upgrade to Fedora 22 (urgent)

Alex Satrapa grail at goldweb.com.au
Mon Aug 10 22:24:50 UTC 2015


Absolutely yes, you should have a firewall active on any machine with an active network interface. That firewall should work to protect the Internet from your machine as well as protecting your machine from the Internet.

There are about as many firewall options as there are sysadmins. One that I like is “Firehol”: http://firehol.org/#firehol

This “Domain Specific Language” tries to help you build firewalls by providing a vocabulary around the services you’re trying to enable. This removes you one or two levels from iptables where you have to remember to set up incoming, outgoing, and through-traffic rules for all services.

Be aware that FireHOL is based on a very strict firewall concept of denying everything that isn’t explicitly allowed. It has a built-in safeguard of requiring you to type “commit” after you’ve set up new rules, in order to reduce the risk of accidentally locking yourself out of SSH connections (and accidentally shutting down the SSH connection you are currently using).

HTH
HAND

> On 11 Aug 2015, at 07:12, Paul Wilson <mylists at wilsononline.id.au> wrote:
> 
> I found the cause of last error.. some how IPTABLES was activated and was
> blocking request..
> 
> Question , should I run a firewall on my server?
> 
> On Tue, Aug 11, 2015 at 6:24 AM, Paul Wilson <mylists at wilsononline.id.au>
> wrote:
> 
>> Currently my network is working, although I have some tidy up to do,
>> however it looks like some default IPv6 is now in effect,  I can't connect
>> to Apache service because it's not listening to IPv4 stack.
>> 
>> So next issue is to find where to set that..
>> Btw Scott I'm using Fedora 22 as per title.
>> 
> --
> linux mailing list
> linux at lists.samba.org
> https://lists.samba.org/mailman/listinfo/linux

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 481 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.samba.org/pipermail/linux/attachments/20150811/d057e74b/signature.sig>


More information about the linux mailing list