Firewall problem

mmoor · 06-07-2006, 11:55 AM

I was just figured out the gui in KDE from fedora is buggy or i lose my marbeles.
I have http, ftp enabled. also port 110 under other ports. saved that. so far it works. Now today i added port 25. And i saw port 110 is gone. they also don't show up under other ports. only at that point when u enter them after they gone. So in fact im not losing my marbeles i have to remeber all the time what ports are open when i enter a new one.

My question, someone knows in what file does info get writen? So I can manulay edit that ?

routers · 06-08-2006, 04:11 AM

yeah its buggy but dont u know how to update it , i use yum to update i use fc4 for 8 computer with kde all work fine and 1 fc5 for testing purpose also work fine

do not blame kde , its the best for me

netstat -tanp

see what port is on and use for what purpose

ps: i wonder why u run ftp/http/mail on the desktop computer

mmoor · 06-08-2006, 08:27 AM

nope im not blame anybody nor kde

I run ftp, http, etc. becouse im hosting my 5 sites

nope i dont know in what file does info is.. The problem is i ahve now 110, 25, 21 open. now i add 993 and 110,25 are gone again. So I have constantly when i change something to remeber what i have befor already, and need to enter them all again.

If I would know in what file this info is, i could add that file per hand. thats my point.

routers · 06-08-2006, 08:47 AM

system-config-securitylevel <- do with this and make sure selinux is off once everything work fine then u can enable selinux

temporary selinux off

# setenforce 0

mmoor · 06-09-2006, 01:59 AM

selinux is allways off..
but there is no file like securtiylevel on my entry disk

routers · 06-09-2006, 04:14 AM

ok then

# yum install system-config-securitylevel

or u might wait others for better idea

prozac · 06-09-2006, 04:24 AM

Quote:

My question, someone knows in what file does info get writen? So I can manulay edit that ?

generally i have seen iptables (thats the program that is used to block ports) rules written in a file called firewall (i have written mine in rc.firewall). by the way you can write your iptables rules in any file (like bash commands),make the file executable and run it. that way you donot need to depend upon some gui to do the job for you. the iptables rule syntax are not that hard to learn. you might consider getting yourself a nice iptables-howto and start learning how to use it. its the best course of action. by the way you should never trust a gui program completely to do a job like security for you. you should double-check the rule files everytime, you change in it using a gui program.