Hi there I have successfully installed ISPConfig on my CentOS server, and everything seems to be running smoothly. The only thing so far that I can't figure out even after reading the doc is the firewall configuration. I am running a custom app on my box and the application is listening for incoming traffic on a particular TCP port (example 23450). What I would like to be able to do is block any incoming traffic from the outside world to that port, but let other application on the local machine (aka localhost/127.0.0.1) to access it without problem. Can I configure that with ISPConfig firewall ? I did already started the firewall -seems to be turned off by default and tried to add the port my app is using but no matter what I am doing I can still telnet to that port from the outside world... So I think I am missing a step somewhere. Thank for any help/suggestion!
If you activate the ISPConfig firewall and do not add it, then the port is closed. You can check the firewall rules with: iptables -L
iptables output This is the output of iptables -L > iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination I have verified that ISPConfig report the Firewall is ON but from the output above I am not convinced of it... Is there anything else I need to activate?
Your firewall is off. Did you disable SELinux on your system? Are there any errors in /home/admispconfig/ispconfig/ispconfig.log?
The log in /home/admispconfig/ispconfig/ispconfig.log do not seems to show any particular error. It looks more like the standard ISConfig management (cleaning up log for mails, and so on). I don't recall disabling SELinux... Is there a way to check if it's running ? Sorry I am not an expert in Linux admin. I was really hoping to get the firewall up and running in a click or two.
