Archive for March, 2011

Linux:Iptables rules for different services

Sunday, March 20th, 2011

Bellow information for nfs server: vi /etc/sysconfig/nfs LOCKD_TCPPORT=32803 LOCKD_UDPPORT=32769 MOUNTD_PORT=892 RQUOTAD_PORT=875 STATD_PORT=662 STATD_OUTGOING_PORT=2020 Now reboot the services # service portmap restart # service nfs restart # service rpcsvcgssd restart Now add rules into iptables -A RH-Firewall-1-INPUT -s 192.168.2.0/24 -p udp -m udp –dport 111 -j ACCEPT -A RH-Firewall-1-INPUT -s 192.168.2.0/24 -p tcp -m tcp –dport [...]

Selinux commands for services

Saturday, March 5th, 2011

(a)Selinux Requirement for NIS Clients setsebool -P allow_ypbind=1 ypbind_disable_trans=1 yppasswdd_disable_trans=1 Use getsebool command to verify : getsebool allow_ypbind ypbind_disable_trans yppasswdd_disabled _trans allow_ypbind -> on ypbind_disable_trans –>on yppasswdd_disable_trans –> on b) Selinux for vsftpd getsebool -a | grep ftp allow_ftpd_anon_write –> off allow_ftpd_full_access –> off allow_ftpd_use_cifs –> off allow_ftpd_use_nfs –> off ftp_home_dir –> off httpd_enable_ftp_server –> [...]