Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: Longview - Firewall
PostPosted: Tue Jul 02, 2013 5:24 am 
Offline
Senior Member

Joined: Mon Feb 02, 2009 1:43 am
Posts: 67
Website: http://fukawi2.nl
Location: Melbourne, Australia
Loving Longview so far :)

Just thought I'd share firewall config; from what I can gather in the source code, the only firewall holes required is TCP port 443 to longview.linode.com

Code:
iptables -A OUTPUT -p tcp --dport 443 -d longview.linode.com -j ACCEPT


Or an appropriate variation of the above in the FORWARD chain on a perimeter firewall if you have one of them like I do.


Top
   
 Post subject: Re: Longview - Firewall
PostPosted: Tue Jul 02, 2013 8:33 am 
Offline
Linode Staff
User avatar

Joined: Fri Jan 29, 2010 8:44 am
Posts: 65
Location: New Jersey
Thanks for contributing! I'll see about adding it to our guide (http://library.linode.com/longview) in case others run into the same thing! :D


Top
   
 Post subject: Re: Longview - Firewall
PostPosted: Tue Jul 02, 2013 6:55 pm 
Offline
Senior Member

Joined: Mon Feb 02, 2009 1:43 am
Posts: 67
Website: http://fukawi2.nl
Location: Melbourne, Australia
You're welcome... I gotta be good for something other than being a pretty face (I'm not very good at that either though)


Top
   
 Post subject: Re: Longview - Firewall
PostPosted: Sat Jul 06, 2013 10:47 pm 
Offline
Senior Member

Joined: Sat May 03, 2008 4:01 pm
Posts: 567
Website: http://www.mattnordhoff.com/
That iptables rule looks up longview.linode.com once and stores the IPs (or just one of them?). You're out of luck if the IP changes.

_________________
Matt Nordhoff (aka Peng on IRC)


Top
   
 Post subject: Re: Longview - Firewall
PostPosted: Sat Jul 06, 2013 11:56 pm 
Offline
Senior Member

Joined: Mon Feb 02, 2009 1:43 am
Posts: 67
Website: http://fukawi2.nl
Location: Melbourne, Australia
mnordhoff wrote:
That iptables rule looks up longview.linode.com once and stores the IPs (or just one of them?). You're out of luck if the IP changes.

Correct; just like any other iptables rule. You're no better off using the IP address(es) instead of the hostname, and I'm not going to make 443 wide-open. You can if you like.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group