Exact syntax and examples for iptables

[sunhux G]

Hi Aaron,

iptables is not running as the previous sysadmin hardened the server.

How do I turn it on?


So I issue the two commands you gave on both cluster nodes & it will
stop the Windows server from accessing on both nodes as well as the
cluster virtual IP address?

What's the command to reverse back, in case there's problem, I'll
need to fallback


Thanks
U
On Fri, Sep 18, 2009 at 10:35 AM, Aaron Bliss <abliss at brockport.edu> wrote:

> Assuming that you already have iptables running
>
> /sbin/iptables -I RH-Firewall-1-INPUT -s 10.5.5.25 -j DROP
> /sbin/service iptables save
>
> -----Original Message-----
> From: redhat-list-bounces at redhat.com [mailto:
> redhat-list-bounces at redhat.com]
> On Behalf Of sunhux G
> Sent: Thursday, September 17, 2009 10:30 PM
> To: General Red Hat Linux discussion list
> Subject: Exact syntax and examples for iptables
>
> Hi,
>
> I have a RHEL 5.1  cluster that's constantly being accessed by
> application from a Windows server application via sqlnet (ie Tcp
> port 1521) which caused a specific Oracle accounts to be locked.
>
> Thus I would like to set up iptables / firewall on this Linux box to
> stop the sqlnet access.  Can someone provide me some example
> commands / syntax ?
>
> Source IP address : 10.5.5.25   (Windows server)
> Tcp port : 1521
> My Linux boxes IP address :  10.5.5.46 / .47
> My Linux cluster virtual addr : 10.5.5.45
>
> In fact I would like to block on all ports on the Linux cluster to stop
> this Windows server from accessing it.  So what's the exact commands
> I should issue on each of the Linux box?  Would iptables also block
> the Windows server from accessing the cluster virtual IP addr?
>
>
> Thanks
> U
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>