Installation from os - Non working iptables example

Latest response

This error is about:

 

RHEV 3 Beta. Lab 7 Objetives. 1. Install Red Hat Enterprise Linux Hosts.

 

I am trying to install an Hypervisor from an installed RHEL OS.

 

The iptables example is:

 

:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [10765:598664]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp --dport 22 -j ACCEPT
-A INPUT -p tcp --dport 16514 -j ACCEPT
-A INPUT -p tcp --dport 54321 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 5634:6166 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 49152:49216 -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -m physdev ! --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited
COMMIT

Unfortunately this did not work. I had to make two changes for this to work.

 

First change is to add:

*filter

at the very first beginning.

 

Second change is to remove -m from:

-A INPUT -p tcp -m state --state NEW -m

so that it reads:

-A INPUT -p tcp -m state --state NEW

as the iptables reload complains about -m needing to have an argument.

 

 

Are these changes ok? Or do you recommend other settings?

If there is a bug on the documentation please fix it for other users.

 

Thank you!

ad

Responses