Changes between Version 12 and Version 13 of sysadminiptables

Timestamp:

Jun 22, 2009, 3:20:06 PM (13 years ago)

Author:

risard

Comment:

--

sysadminiptables

@@ -153 +153 @@
 
 The important things here are:
-  1. The protocol is correct - tcp.  If tcp6 is running for example (IPv6) then the connection will not likely work.
-  2. The service is listening on the correct ip.  If the entry was 127.0.0.1:5432 you wouldn't get a connection because it's only listening to the localhost.  0.0.0.0:5432 or the machine's public IP are acceptable.
-  3. The service is listening for connections from where ever you're trying to connect from.  In this case it will take a connection from  anywhere (0.0.0.0:*).  It's important to ensure that the machine isn't listening for a connections from a specific machine (ie. 10.0.0.2:*) or if it is, then it's the machine you're trying to connect from.
+  1. The protocol is correct - tcp.  If tcp6 is running for example (IPv6) then the connection will not likely work.[[BR]]
+
+  2. The service is listening on the correct ip.  If the entry was 127.0.0.1:5432 you wouldn't get a connection because it's only listening to the localhost.  0.0.0.0:5432 or the machine's public IP are acceptable.[[BR]]
+
+  3. The service is listening for connections from where ever you're trying to connect from.  In this case it will take a connection from  anywhere (0.0.0.0:*).  It's important to ensure that the machine isn't listening for a connections from a specific machine (ie. 10.0.0.2:*) or if it is, then it's the machine you're trying to connect from.[[BR]]
+
   4. The port is actually in the LISTEN state.
 
@@ -161 +164 @@
 
 {{{
-   ps aux | grep 80
-}}}
-
+   ps aux | grep postgresql
+}}}
+
+In this example, you should see a line like:
+{{{
+    postgres 21296  0.0  0.0 100608  5784 ?        S    May28   0:01 /usr/lib/postgresql/8.3/bin/postgres -D /<path>/main
+}}}
+
+This will change depending on the service you're running, but will coincide with the command you ran to start the service.  (So in the example above, the command to start postgres was obviously: /usr/lib/postgresql/8.3/bin/postgres -D /<path>/main)
+
+----
+== Quick Reference ==
+
+=== Commands ===
+{{{
+# list rules
+
+    sudo iptables -L
+    sudo iptables -L -n     
+
+# iptable command syntax
+
+    iptables -A INPUT -s 10.104.100.167 -d 10.104.100.168 -p tcp -m tcp --dport 8023 -j ACCEPT
+
+# save
+    
+    sudo iptables-save > /<path>/<firewall_file>
+
+# apply
+
+    sudo iptables-restore < /<path>/<firewall_file>    
+}}}
+
+=== Necessary Ports - Database Server ===
+