turn off http port 80, keep https port 443
 

With a fresh FC3 install, the system has both ports working:
port 80 = http://192.168.5.100
port 443 = https://192.168.5.100

How can I stop port 80 and
continue secure access on port 443 only?


Under Security Level Configuration, I un-checked WWW (HTTP)
But the system still responds to both:
http://192.168.5.100
https://192.168.5.100

Why is this?

I tested the same on a friend's FC3 box and got the same results. :confused:

You might have to restart the firewall with the new rules, after you unchecked that box.

Hamish

I even reboot the system.

But the system still responds to:
http://192.168.5.100

Here is the "/etc/sysconfig/iptables"
As you can see port 80 is no longer there.
But http traffic is still some how getting through to Apache.

I think u should try and install a line in there somewhere explicitly dealing with that port - somthing like this

-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 80 -j REJECT

Better still

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j REJECT

why not remove port 80 from apache and only allow 443 instead of configuring the firewall?

Hey
I'm fairly new to iptables, but does this line not say to allow all incoming, outgoing and forwarded packets?

if so, there is no reason to have a firewall at all!!
hamish