Security :: How To Disable The Iptables Permanently
Mar 5, 2011I am using Fedora. I want to disable Linux iptables permanently. Normally when I reboot my pc the iptable service is on. how can I disable even I turn reboot the pc.
View 6 RepliesI am using Fedora. I want to disable Linux iptables permanently. Normally when I reboot my pc the iptable service is on. how can I disable even I turn reboot the pc.
View 6 RepliesSo I just installed Ubuntu on my second laptop, however I ran into a problem. The F9 key is going crazy. I'm not exactly sure what is causing it (I've already popped off and cleaned the keys) but if I could find a way to just disable it I'd be very happy.
View 3 Replies View RelatedI came across the following method of how to permanently disabling selinux and it's notifications. Although changing enforcement from the gui into permissive mode does most of the job, the notifications still pop-up when some applications are started.
So to disable it do the following:
open terminal as root and execute:
Quote:
And then change the SELINUX line to SELINUX=disabled
Quote:
This is it. Now reboot the system and selinux will never bother you again.
If you are not a Fedora user and you are using this forum just because we are cooler here then you will not find the /etc/selinux/config as in the fedora releases. What you need to do is to edit the kernel boot line and add selinux=0 at the end:
Quote:
Reboot the system
I have upgraded to ubuntu 10.4 i have some issues with it, first how to disable service permanently using GUI, second how can i change root passwd i tried sudo passwd root does not work, third i have network shared driver i want to mount permanently and create short cut to desktop.
View 6 Replies View RelatedI am using Ubuntu 10.04 on Lenovo Thinkpad, and I have tree pointing devices:
- touchpad
- trackpoint
- mouse, that is connected only when I am home, so for around 50% of time.
I have downloaded a package "Pointing Devices" and tried to disable a touchpad, which annoys me. Sometimes new settings works, but each time I connect/disconnect mouse, the default settings (everything on) restores. It's even worse, because right now the touchpad works and annoys me, while it's written that it's disabled in "Pointing devices", so either the package is outdated, or it's a BUG.
How to permanently disable a touchpad?
I've tried all three options here to permanently disable the fn key (so that when I press F1 it'll bring up help and when I press fn+F1, it'll dim the screen, etc.).
These methods work upon reboot, but once the computer is put to sleep (i.e. I close my lid), the settings are reverted back to default and I must use fn+ for everything again.
How can I keep the fn key disabled?
And on another note, why use gksudo instead of just sudo?
Now i want to disable my ssh server "permanently",which means it won't run unless i start it after i login.that is,it is disabled at boot time by default.
i have asked a similar question before,but i still have some confusions.
Say that now the ssh server is running.my system is ubuntu 10.04. code...
The disable|enable API is not stable and might change in the future.
the shell gives me a warning:do not match LSB Default-Start values,this API is not stable and ...
what does this mean? still it can't disable the server "permanently",ethier.
what on earth should i do to solve this?
So from a web server stand point if we start using swap for httpd or mysql its bad and performance goes down the drain. So would it be a good or bad idea to disable swap entirely?
View 2 Replies View RelatedI have problems with a high pitch noise on my lenovo thinkpad t61. Seems that more people have the problem: [URL]... When I stick in my usb mouse, problem is gone. I only have this problem on battery. when posting this rmmod uhci_hcd seems to solve it. How to make that permanent? How do disable bluetooth permanently?
View 1 Replies View RelatedI don't use wireless on my desktop so i would like it permanently disabled...each time i boot up it's back and receving up to 80mb of data from an unknown connection via wireless (i dont use wireless) so, to avoid any weird connections to my neighboors house or some kid hacking the neighborhood driving by with a wireless router in his truck i'd like to permanently turn off wireless. this is kind of funny because i had a hard time getting wireless to work on my laptop, but this is my desktop where i do not want it. i looked it up and your forum back in 2007 said to type in iwconfig in the shell then get the nickname of the wireless card then to black list the wireless card. i did this but it didn't work, so what do i do now? i have ubuntu 9.10
View 9 Replies View RelatedIn the desktop effects configuration screen, "Enable desktop effects" is checked, however the checkbox is grayed out and I can't uncheck it. All I can do is "Suspend desktop effects", but they get reenabled after every login. How do I disable them permanently?
View 2 Replies View Relatedmy thinkpad Edge 11 has some problems with the touchpad and the trackpoint, so i want to permanently disable the touchpad, but not the TrackPoint. Both are PS2 devices.
/dev/input/mouse0 --> TouchPad
/dev/input/mouse1 --> TrackPoint
How can i disable the device? In X it does not work with gpointing-device-settings
What's the best way to permanently disable the package kit update applet in fedora 12. i really dislike my bandwidth being robbed unnecessarily from the other computers running fedora on the network.
System->Preferences->System->Software Updates is not working as it is supposed to.
What is the role of PackageKit? Do i really need it?
How to permanently disable the gnome-keyring-daemon.
I've seen posts where there was a work around to store passwords in clear text. That's not a real solution. I've seen posts where killing the process and removing ~/.gnome2/keyrings is a temporary solution until next time you log in or reboot machine. Removing the package, will force removal of the whole kitchen sink. That's too intrusive.
There must be a way to stop this thing from starting up, ever.
I tried commenting out the entries in the /etc/pam.d/* files that refer to "pam_gnome_keyring.so", and have also unchecked the 3 keyring related entries under System --> Preferences --> Startup Applications, which are affiliated with these 3 files:
But I still get this one process once I log into the console window:
There must be one more file somewhere that says, "hey when someone logs in and starts up gdm, start the gnome keyring daemon".
Disable Dvd/cd rom , usb ports and wireless cards permanently in acer laptop. I no longer need those..
View 4 Replies View Relatedhow to disable permanently the numlock event if the user press it don't work.
View 5 Replies View RelatedI have compiled the proprietary nvidia drivers for 11.3. When I boot, even using the nomodeset boot option, the nouveau module still loads, causing gdm/X to fail. I am able to manually remove the modules with rmmod and restart gdm. Everything then works normally. I have added the line "blacklist nouveau" to both 50-blacklist.conf and 99-local.conf in /etc/modprobe.d
View 7 Replies View RelatedI want to block some ips permanently ie. even I as the root user cannot unblock these ips without having to format the whole system.
So i thought if some blocking software provided passwords for editing rules and I put a 'junk' password there and so that I can't delete the rules without the 'junk' password which I don't know.
So I examined iptables and I saw that it is a kernel module so there is no use of that since I can probably throw it away.
But the basic question is to block ips and gulp the key.
1: Did chkconfig --level 12345 iptables off (and ip6tables too)
2: Did system-config-firewall and unclicked enable
3: Rebooted:
Dang the stuff is still there:
--
# /etc/init.d/iptables status
Table: mangle
Chain PREROUTING (policy ACCEPT)
[code].....
I've been trying to get nfs working, and afer struggling for a little while, I think I've almost got it. I believe the only thing holding me back is iptables (when I disable iptables, I can connect without any issues). I'm running Fedora 11 on the server. Here is my /etc/sysconfig/nfs:
[Code].....
i've tried blocking ping requests with iptables.. and it didnt work Quote: iptables -A INPUT -p icmp --icmp-type echo-request -j DROP
also tried editing sysctl.conf.. which worked perfectly but after i restarted the system i was able to ping my ubuntu machine from my lappy here is what i added to sysctl.conf and then executed it with sysctl -p
Quote: net.ipv4.icmp_echo_ignore_all = 1 here is another atempt to block.. this one worked too... but again after the restart i was able to ping my machine.. Quote: echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
I am learning SELinux from LinuxCBT and I'm stuck at one place. Now video is on RHEL 4 (so tell me if things has changed since, cause I can't find anything related) shows how to disable SELinux security on httpd.first I don't know diff between initrc_t and uncofined_t; and second I don't know if something is wrong is everything is all right.
View 1 Replies View RelatedI have been struggling with this for a very long time now. I have installed Fedora Core 9 on my computer. I have set it up as a caching-nameserver and this is working.
Then I wanted to secure my server with iptables, and I have so far made this script:
# Load the connection tracker kernel module
modprobe ip_conntrack
iptables -F
iptables -P INPUT DROP
iptables -P FORWARD DROP
[Code]....
I can reach the dns server with ping. When trying Nslookup it says that it got SERVFAIL from 127.0.0.1 trying next server, and then it times out.
My resolv.conf file lists:
nameserver 127.0.0.1
nameserver DNS-server
Im pulling my hair out trying to get ftp to work through iptables.Im using vsftpd
Table: filter
Chain INPUT (policy DROP)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
[code].....
I have a problem with iptables, when I execute
[code]....
I am trying to figure out how I can configure IPtables to only allow VNC traffic to an internal server over SSH.
My configuration is WAN < --- > Gateway (Ubuntu 9.10 Server) < --- > Internal Server (that I want to control with VNC over SSH)
I am using Fedora on my desktop pc. I want to know how can i protact my PC from outside world. What firewall policy should i implement in iptables to keep it more secure.
View 5 Replies View RelatedI'm following an openvpn installtion how to and it says to add this to the iptables:
Quote:
# External Interface for VPN
# VPN Interface
VPNIF="tun0"
VPNNET="172.16.0.0/24"
VPNIP="172.16.0.1"
### OpenVPN
[Code]....
Any thoughts as the whole formatting is separate and has the addition of FORWARD rules, etc. I need the VPN running on the .199 address
i set up a dmz to have a internet web server and ftp server, and ssh only from local network, so i wrote a iptables script to load during boot :
[Code]...
The problem is that everything works fine ( i have the same rules for other services such as samba, nfs, mysql on another server) BUT ftp there is no way to make it work. not even locally.when i try to connect, i log in, but while listing the directory i get MLSD ... and it hangs like this for a moment, then i get error message "connection time out" , "impossible to list directory". if i turn off the iptables script no problem,ftp works fine.. but why all services work and ftp no?
how do i have to modify the rules? what is strange also is that if i set as OUTPUT policy "accept", the server seems to be offline."host unknown" error message. I was thinking the rule INPUT is fine cause at least i can login, but the dir list is not going out, so gotta modify output rules. or state?
I've started a new job and have inherited a couple of RHEL4 64-bit servers. The firewall on them is currently disabled. I'm struggling to get them up and running as iptables is not the most user-friendly application. This lead me to downloading and trying a GUI front-end: Guarddog. Great app! But it doesn't have the default behavior I'm looking for. Here is what I need:
Default behavior: Firewall should be wide open, allowing ALL ports/IP's/TCP/UDP in and out of the server.
Blacklist: Oracle TCP port 1521 needs to be blocked in/out of the server.
This will help get us passed our company's security vulnerability scan. (We aren't able to patch/upgrade Oracle at this time because we'd lose vedor support with a legacy app). I will use these settings as a starting point, and then once I learn more and get more comfortable with iptables (or a GUI app) then I can fine tune things to make them more secure. As far as I know (correct me if I'm wrong) once I get a script I just copy it into /etc/rc.firewall and it will load when iptables starts.