firewall configuration

Discussion in 'Installation/Configuration' started by sharkmac, Nov 14, 2007.

  1. sharkmac

    sharkmac New Member

    Hi there

    I have successfully installed ISPConfig on my CentOS server, and everything seems to be running smoothly. The only thing so far that I can't figure out even after reading the doc is the firewall configuration.
    I am running a custom app on my box and the application is listening for incoming traffic on a particular TCP port (example 23450). What I would like to be able to do is block any incoming traffic from the outside world to that port, but let other application on the local machine (aka localhost/ to access it without problem.
    Can I configure that with ISPConfig firewall ? I did already started the firewall -seems to be turned off by default and tried to add the port my app is using but no matter what I am doing I can still telnet to that port from the outside world... So I think I am missing a step somewhere.

    Thank for any help/suggestion!
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    If you activate the ISPConfig firewall and do not add it, then the port is closed.

    You can check the firewall rules with:

    iptables -L
  3. sharkmac

    sharkmac New Member

    iptables output

    This is the output of iptables -L

    > iptables -L
    Chain INPUT (policy ACCEPT)
    target prot opt source destination

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    I have verified that ISPConfig report the Firewall is ON but from the output above I am not convinced of it... Is there anything else I need to activate?
  4. falko

    falko Super Moderator ISPConfig Developer

    Your firewall is off. Did you disable SELinux on your system? Are there any errors in /home/admispconfig/ispconfig/ispconfig.log?
  5. sharkmac

    sharkmac New Member

    The log in /home/admispconfig/ispconfig/ispconfig.log do not seems to show any particular error. It looks more like the standard ISConfig management (cleaning up log for mails, and so on).

    I don't recall disabling SELinux... Is there a way to check if it's running ?
    Sorry I am not an expert in Linux admin.

    I was really hoping to get the firewall up and running in a click or two.
  6. falko

    falko Super Moderator ISPConfig Developer

    What's in /etc/sysconfig/selinux?

Share This Page