Redhat Server firewall recommendation

[Xiaochun Tong]

We are going to migrate to RHEL 7.4 and upgrading to CL 6.2. Our system administrator is interested in tightening up the security settings of the environment. He is proposing to use the RHEL system firewall to open up only the ports that will be needed, and disallow everything else. Since this is something we’ve never done before, I want to ask what everyone else is doing in regards to system firewall and whether there are any pitfalls we should be aware of.

Thank you in advance for your feedback.

Topic

[Jerry Tilsley]

We are running RHEL 7.5 and CL 6.2.

We had the system firewall in use for a long time without much issue.  We did have to use the setting “Host Server routes traffic” and put all the RMI ports in on the OS side, but that was really the only adjustments we had to make for it to work.

Jerry

[Author]

Replies