Cari Blog Ini

Minggu, 22 April 2012

Firewall & SELinux

[1] If some firewalls are running in your LAN and iptables in the server is unnecessarry, Stop it.

[root@dlp ~]#/etc/rc.d/init.d/iptables stop
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Unloading iptables modules: [ OK ]
[root@dlp ~]#chkconfig iptables off
[root@dlp ~]#chkconfig ip6tables off
[2] Disable SELinux (Security-Enhanced Linux) if you don't need it.

[root@dlp ~]#vi /etc/sysconfig/selinux

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=disabled               # change
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted

Tidak ada komentar:

Posting Komentar