[K12OSN] Default iptables?

Joseph Bishay joseph.bishay at gmail.com
Sat Mar 21 15:47:43 UTC 2009


Since I'm remote from the server and only have SSH access I can follow
your instructions on service iptables stop but is there a way to test
if a terminal boots remotely?

The other part of your instructions that makes me a bit nervous is the
'start adding ports that need to come in from the internet and to
clients."  I have no idea what ports are needed or aren't needed :)  I
assume you're suppose to let everything in and out on the thin client
network card, but on the Internet-facing NIC is there a standard "let
these through, don't let those through" list?

Thank you

On Sat, Mar 21, 2009 at 11:22 AM, Barry R Cisna <brcisna at eazylivin.net> wrote:
> Hi Joseph,
> >From what I understand you can not get any TC's to boot up correctly
> now? First do an 'service iptables stop' , as root. This will stop
> iptables altogether. Boot a couple TC's now and make sure your TC's are
> at least able to boot up correctly at this point.
>  After you make sure they will boot Ok here.next a good thing to do is
> install Webmin,on your server and drill to "Network> Linux firewall" in
> Webmin. Select the one option of default to reject all, this option
> builds a nice firewall for the server that will work nicely with
> k12ltsp/k12linux,then start adding ports that needs to come in from the
> internet and to clients. This will take a lot of the error prone-ness
> out of setting up iptables. Voice of experience talking here :-)
> Make sure after this you start the 'iptables-k12ltsp'if this is setup on
> the server?. to allow all traffic as trusted to the TC's side of your
> network
> You should be golden at this point!
> Take Care,
> Barry
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>

More information about the K12OSN mailing list