#centos6.5

[ushf]

Reminder on iptables configs CentOS6.5 and earlier

lokkit: Seems like a standard. AKA system-config-firewall-base in RH-land. Is used in a lot of puppet manifests floating around the foreman-associated projects and in SaltStack. Simple configuration, e.g.

lokkit --list-services

, add a hole for SSH

lokkit --service=ssh

or

lokkit --port=ssh:tcp

firewalld: in Fedora20 and CentOS7. This is a dynamic firewall configuration daemon (uses dbus) which can co-exist with lokkit.

The alternatives are? Shorewall? Just run iptables commands?

Debian got rid of it, claiming it was buggy and unmaintained.

NB: netstat-nat is interesting.

[codehorizon]

Centos 7 Upgrade

Karena Centos terkenal dengan kesibukannya yang membuat mereka tidak sempat mengimpor, menguji, dan membuat ulang upgrade tool dari RHEL, mari kita upgrade Centos dengan tool Red Hat.

wget http://dev.centos.org/centos/6/upg/x86_64/Packages/preupgrade-assistant-1.0.2-33.el6.x86_64.rpm http://dev.centos.org/centos/6/upg/x86_64/Packages/preupgrade-assistant-contents-0.5.13-1.el6.noarch.rpm http://dev.centos.org/centos/6/upg/x86_64/Packages/preupgrade-assistant-ui-1.0.2-33.el6.x86_64.rpm http://dev.centos.org/centos/6/upg/x86_64/Packages/python-rhsm-1.9.7-1.el6.x86_64.rpm http://dev.centos.org/centos/6/upg/x86_64/Packages/redhat-upgrade-tool-0.7.22-1.el6.noarch.rpm sudo yum localinstall preupgrade-assistant-* sudo preupg sudo yum localinstall redhat-upgrade-tool-0.7.22-1.el6.noarch.rpm python-rhsm-1.9.7-1.el6.x86_64.rpm sudo rpm --import http://isoredirect.centos.org/centos/7/os/x86_64/RPM-GPG-KEY-CentOS-7 sudo redhat-upgrade-tool --network 7.0 --instrepo http://mirror.centos.org/centos/7.0.1406/os/x86_64/ --force sudo shutdown -r now

Note: Percobaan upgrade dari Centos 6.5

EOF.