Questions about IPTABLES and FIREWALL

latinmusic74 · 12-29-2008, 03:53 PM

Hi RHCEs,

Please advice the best and fastest way to manage the firewall during the RHCE exam ?

and

Please advice a good tutorial to learn about iptables?

Can you create iptables using system-config-securitylevel?

Thanks

salasi · 12-29-2008, 05:02 PM

I'm somewhat disqualified from answering because my knowledge of RHCE is limited (...limited to zero, as it happens), but I have heard of these firewall thingies before.

Assuming that general information on iptables will help (and not just information on the default way of setting up a firewall under RH) there are many threads on the subject of firewalls, here
http://www.linuxquestions.org/questi...ux-security-4/
and in particular
http://www.linuxquestions.org/questi...erence-691585/
discusses reference materials for iptables.

custangro · 12-29-2008, 06:40 PM

Quote:

Originally Posted by latinmusic74

Hi RHCEs,

Please advice the best and fastest way to manage the firewall during the RHCE exam ?

and

Please advice a good tutorial to learn about iptables?

Can you create iptables using system-config-securitylevel?

Thanks

The "easiest" way to configure the firewall is with system-config-securitylevel. The fastest way is trough the command line using the iptables commands.

You should learn them. But if you are unfamiliar with the commands; the best way is to do it with the system-config-securitylevel tool.

It just depends on your definition of "fastest"...

What's faster to you? Doing:

Code:

root@host# iptables -A INPUT -p tcp --dport 80 -j ACCEPT

Or putting a checkmark in the HTTP box in the system-config-securitylevel tool?

-C

latinmusic74 · 12-29-2008, 07:54 PM

So, for RHCE test, I can use "system-config-securitylevel tool" instead of writing a code like

root@host# iptables -A INPUT -p tcp --dport 80 -j ACCEPT.

or still need to learn the code for the test.......

custangro · 12-30-2008, 10:07 AM

Quote:

Originally Posted by latinmusic74

So, for RHCE test, I can use "system-config-securitylevel tool" instead of writing a code like

root@host# iptables -A INPUT -p tcp --dport 80 -j ACCEPT.

or still need to learn the code for the test.......

In the RHCE, it is results that matter...it's not what you do...it's if it gets the job done.

that being said...

It's no guarantee that you will have the GUI during the test. Also, if you've read the prep-guide...

https://www.redhat.com/certification/rhce/prep_guide/

You will note...

Quote:

RHCEs must also be able to:

* configure hands-free installation using Kickstart
* implement logical volumes at install-time
* use iptables to implement packet filtering and/or NAT
* use PAM to implement user-level restrictions

It mentions NAT...and as far as I know; You CANNOT configure NAT with the sytem-config-securitylevel tool.

My advice? Learn how to use both.

Use Jang's book...

http://www.amazon.com/Certified-Engi.../dp/0072264543

...with the prep guide.

Also you should get 2 PCs and start practicing!

Good Luck!!!

-C

latinmusic74 · 12-30-2008, 07:10 PM

Thanks custangro............