Firewall help

[Jarod Wilson]

On Wednesday 11 March 2009 12:13:00 Jared Carlson wrote:
> Afternoon,
> 
> I was asked to help configure a Red Hat box to allow certain IP's to get past the firewall.  Anyone have experience with that?  We think the firewall is causing a slow connection and we have some remote users trying to SVN some large files and having some serious issues.
> 
> Any help is great - thanks!

For a sufficiently new enough Red Hat box, system-config-firewall is
your friend. For older versions, I believe its
system-config-securitylevel. Both twiddle /etc/sysconfig/ip{,6}tables,
which you can also edit by hand (but that can be a wee bit error-prone
if you don't know what you're doing). Manually adding iptables
stuff on the cli can also be done, and then saved into those same
/etc/sysconfig/ip{,6}tables files by doing a 'service ip{,6}tables save'.

Now, for even OLDER RH, the "user-friendly" config tool would be
lokkit, but that's not been supported in ages, so far as I know...


-- 
Jarod Wilson
jarod-ajLrJawYSntWk0Htik3J/w at public.gmane.org