Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace "disable iptables" by proper iptables rules #12

Open
jamessemai opened this issue Feb 5, 2015 · 0 comments
Open

Replace "disable iptables" by proper iptables rules #12

jamessemai opened this issue Feb 5, 2015 · 0 comments

Comments

@jamessemai
Copy link

It seems paradoxical that what is essentially a security tool recommends weakening the host operating system it is installed on by disabling its firewall:

NOTE: You may need to disable or modify this server's firewall to access port
8080. To disable this system's firewall, type:
# service iptables save
# service iptables stop
# chkconfig iptables off
Alternatively, you can modify your firewall to enable incoming connections to
port 8080. Here is a full list of all the ports Zenoss accepts incoming
connections from, and their purpose:
8080 (TCP) Web user interface
11211 (TCP and UDP) memcached
514 (UDP) syslog
162 (UDP) SNMP traps

True, it is indicated which ports should be opened, but since no concrete commands are given for that option, I guess most people will not bother.

I propose adding the proper iptables commands to open those ports.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant