Skip to content

Replace "disable iptables" by proper iptables rules #12

@jamessemai

Description

@jamessemai

It seems paradoxical that what is essentially a security tool recommends weakening the host operating system it is installed on by disabling its firewall:

NOTE: You may need to disable or modify this server's firewall to access port
8080. To disable this system's firewall, type:
# service iptables save
# service iptables stop
# chkconfig iptables off
Alternatively, you can modify your firewall to enable incoming connections to
port 8080. Here is a full list of all the ports Zenoss accepts incoming
connections from, and their purpose:
8080 (TCP) Web user interface
11211 (TCP and UDP) memcached
514 (UDP) syslog
162 (UDP) SNMP traps

True, it is indicated which ports should be opened, but since no concrete commands are given for that option, I guess most people will not bother.

I propose adding the proper iptables commands to open those ports.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions