#lokkit

[dimorphodon-x]

Happy birthday! :3

Aww!💕 thank you!

[hisnameiscarlos-blog]

I made a thing. Look at the thing!

[ushf]

Reminder on iptables configs CentOS6.5 and earlier

lokkit: Seems like a standard. AKA system-config-firewall-base in RH-land. Is used in a lot of puppet manifests floating around the foreman-associated projects and in SaltStack. Simple configuration, e.g.

lokkit --list-services

, add a hole for SSH

lokkit --service=ssh

or

lokkit --port=ssh:tcp

firewalld: in Fedora20 and CentOS7. This is a dynamic firewall configuration daemon (uses dbus) which can co-exist with lokkit.

The alternatives are? Shorewall? Just run iptables commands?

Debian got rid of it, claiming it was buggy and unmaintained.

NB: netstat-nat is interesting.

[dummdida]

Using lokkit to handle your firewall.

Some common thing is to turn of the firewall if a freshly installed machine isn't reachable from the outside, as fidling with iptables is not everyones passion. lokkit is another way to open some ports to the public. Just use

$ sudo lokkit --list-services

to see what services/ports can be managed/opened using lokkit. For me it's quite common to open ports for ssh, ipsec and mdns afer a fresh installation

$ sudo lokkit -s ssh $ sudo lokkit -s mdns $ sudo lokkit -s ipsec

Let's see if there will be something new in the near future to handle - somtimes quite complex (see virtualization) - iptable setups.

[balepservice-blog]

The IT sector has gained great momentum in today's times and a large number of people have understood the benefits of working in the IT sector.