Thursday, 15 March 2007

iptables firewall

The iptables firewall feature also referred to as netfilter is the default firewall software when you install Red Hat Linux 8.0 and 9.0. This firewall can be configured to block ports and thus disallow TCP traffic to and from the Backup Exec server. The Backup Exec Unix Agent on the Linux server/workstation broadcasts every 30 seconds by default to port 6101 on the backup server and listens on TCP port 8192 on the Linux system. Port 8192 must be opened on the Linux server/workstation to allow backup traffic to flow to and from the Backup Exec Unix/Linux Agent.

To determine if iptables is installed,Type:
rpm -qa iptables

To view the currently loaded iptables rules in the kernel, type:
iptables -L

To append a rule to the current rules that allows incoming TCP packets with a source of the media server's IP address to any TCP port on the Linux server/workstation, type:
iptables -A INPUT -p tcp -m tcp -s -j ACCEPT

For a more secure firewall setting that appends a rule to allow TCP packets from the media server through port 8192 on the Linux workstation/server, type:
iptables -A INPUT -p tcp -m tcp -s -d --dport 8192 -j ACCEPT

No comments:

Post a Comment