Initial Settings : Firewall

 [1]. It's possible to show FireWall Service Status like follows. (enabled by default)

[root@localhost ~]# systemctl status firewalld

*  firewalld.service - firewalld - dynamic firewall daemon

   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor p>

   Active: active (running) since Wed 2019-09-24 23:16:35 JST; 18min ago

     Docs: man:firewalld(1)

 Main PID: 801 (firewalld)

    Tasks: 2 (limit: 25025)

   Memory: 30.9M

   CGroup: /system.slice/firewalld.service

           └─801 /usr/libexec/platform-python -s /usr/sbin/firewalld --nofork ->


Sep 24 23:16:34 localhost.localdomain systemd[1]: Starting firewalld - dynamic >

Sep 24 23:16:35 localhost.localdomain systemd[1]: Started firewalld - dynamic f>


# [Active: active (running) ***] means firewalld is running now

[2].   If you use FireWall service, it needs to modify FireWall settings manually because incoming requests for services are mostly not allowed by default.

Refer to here for basic Firewall operation and settins.

Configuration examples of CentOS 8 on this site are based on the environment Firewalld service is always enabled.

[3]. If you don't need FireWall service because of some reasons like that some FireWall Machines are running in your Local Netowrk or others, it's possbile to stop and disable FireWall service on CentOS server like follows.

# stop service

[root@localhost ~]# systemctl stop firewalld

# disable service

[root@localhost ~]# systemctl disable firewalld

Removed /etc/systemd/system/multi-user.target.wants/firewalld.service.

Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

Initial Settings : SELinux

[4] It's possible to show current SELinux (Security-Enhanced Linux) Status like follows. (enabled by default)

[root@localhost ~]# getenforce

Enforcing     # SELinux is enabled

[5].  If you enable SELinux, there are cases to modify SELinux policy manually because sometimets SELinux stop applications.

Refer to here for basic SELinux operation and settins.

Configuration examples of CentOS 8 on this site are based on the environment SELinux is always Enforcing.

[6]. If you don't need SELinux feature because of some reasons like that your server is running only in Local safety Network or others, it's possbile to disable SELinux like follows.

[root@localhost ~]# vi /etc/selinux/config

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

#     enforcing - SELinux security policy is enforced.

#     permissive - SELinux prints warnings instead of enforcing.

#     disabled - No SELinux policy is loaded.

# change the value below

# enforcing  ⇒ enabled

# disabled   ⇒ disabled

# permissive ⇒ enabled but only loging, not deny accesses

SELINUX=disabled

# SELINUXTYPE= can take one of these two values:

#     targeted - Targeted processes are protected,

#     minimum - Modification of targeted policy. Only selected processes are protected.

#     mls - Multi Level Security protection.

SELINUXTYPE=targeted


# restart computer to apply setting

[root@localhost ~]# reboot


Comments

Post a Comment

Popular posts from this blog

LINUX Move and copy files using SSH

Often you will need to move one or more files/folders or copy them to a different location. You can do so easily using an SSH connection. The commands which you would need to use are mv (short from move) and cp (short from copy). The mv command syntax looks like this: mv configuration.php-dist configuration.php By issuing the above command we will move (rename) the file configuration.php-dist to configuration.php. You can also use mv to move a whole directory and its content: mv includes/* ./ This will move all files (and folders) in the includes/ directory to the current working directory. In some cases however, we will need to only update the files and move only files that were changed, which we can do by passing ‘ -u ’ as argument to the command: mv -u includes/* admin/includes The copy (cp) command works the same way as mv, but instead of moving the files/folders it copies them. For example: cp configuration.php-dist configuration.php The command will copy the co
Read more

Java : Variables Declaring

[1]. Java Variables Variables are containers for storing data values. In Java, there are different types of variables, for example: String - stores text, such as "Hello". String values are surrounded by double quotes int - stores integers (whole numbers), without decimals, such as 123 or -123 float - stores floating point numbers, with decimals, such as 19.99 or -19.99 char - stores single characters, such as 'a' or 'B'. Char values are surrounded by single quotes boolean - stores values with two states: true or false [2]. Declaring (Creating) Variables To create a variable, you must specify the type and assign it a value: Syntax type variable = value ; Where type is one of Java's types (such as int or String), and variable is the name of the variable (such as x or name). The equal sign is used to assign values to the variable. To create a variable that should store text, look at the following example: Example Create a variable called  name  of type  Stri
Read more

SQL Self JOIN

SQL Self JOIN A self JOIN is a regular join, but the table is joined with itself. Self JOIN Syntax SELECT column_name(s) FROM table1 T1, table1 T2 WHERE condition; T1 and T2 are different table aliases for the same table.
Read more