Login or Register to Ask a Question and Join Our Community


IP Networking

Is there any way to add an exception for a port in the firewall setting, permanently?

 
Thread Tools Search this Thread
Special Forums IP Networking Is there any way to add an exception for a port in the firewall setting, permanently?
Prev   Next
# 1  
Old 03-02-2010
Is there any way to add an exception for a port in the firewall setting, permanently?
Hello,

I want to add a port in the firewall exception list so that my application can be accessed over network even if firewall is disabled. I am using iptables command to add exception.

The problem is, after setting the rule if I change the firewall setting i.e. on/off then it is overwriting all the existing rules.

Let me give you two scenarios to help you understand the problem better:
Scenario 1) Firewall is On. I have added a rule in the iptables to allow an input access to a particular port. Now my (Web based) application can be accessed from other systems over the network. Now I disable the firewall. Still my app can be accessed over network but the rule is gone.

Scenario 2) Firewall is Off. I have added a rule in the iptables to allow an input access to a particular port. Now my (Web based) application can be accessed from other systems over the network. I enable the firewall. Now the app cannot be accessed over network because all the existing rules have been overwritten.

Is there any way to add an exception for a particular port in the firewall setting so that disabling or enabling the firewall (any number of times) won't affect the existing rule set.

Note: I can only use 'commands'. Doing changes using graphical interface won't be helpful in my case as I am using a script to install my app and configure the port settings.
 
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Unable to open firewall port for external traffic.

Below is what i did to open the firewall port on # sudo firewall-cmd --zone=public --add-port=27012/tcp --permanent Warning: ALREADY_ENABLED: 27012:tcp success # sudo firewall-cmd --reload success # firewall-cmd --list-all public target: default icmp-block-inversion: no ... (10 Replies)
Discussion started by: mohtashims
10 Replies

2. Red Hat

Add directory to path permanently

I ssh in and am trying to add a directory permanently to $PATH in centos 7 and having issues. My current $PATH is echo $PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin but when I do a sudo nano ~/.bashrc # .bashrc # User specific aliases and functions alias... (7 Replies)
Discussion started by: cmccabe
7 Replies

3. Shell Programming and Scripting

How to check the IP:PORT firewall uses?

I have my firewall process running # ps -ef | grep firewall root 21169 1 0 08:50 ? 00:00:00 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid I wish to know what ip : port number it is using. Can you please tell me how can i find out ? I tried the below command... (4 Replies)
Discussion started by: mohtashims
4 Replies

4. Shell Programming and Scripting

Good way to check firewall port on Linux centos 7

Hi, I need to know what kind of firewall settings does the linux box have? Is port 25 blocked in any way? Linux techx 3.10.0-514.10.2.el7.x86_64 #1 SMP Fri Mar 3 00:04:05 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux I'm coming from this thread. (1 Reply)
Discussion started by: mohtashims
1 Replies

5. UNIX for Dummies Questions & Answers

Rsync port and firewall

hi guys I doing some collocation for a customer, customer requested to use other port for ssh not the default one. OK no problem and customer will be using rsync to sync backups among other things I know we have to open port let's say port 5999 for ssh since we are using that one now but I... (1 Reply)
Discussion started by: karlochacon
1 Replies

6. Shell Programming and Scripting

Setting the path permanently using shell script

I'm trying to set the path permanently through a shell script. (/opt/quest/bin:/usr/bin/lab to /.profile.) I tired using echo option like below but it doesn't work. Please suggest me the right way to do so. echo "PATH=$PATH:/opt/quest/bin:/usr/bin/lab" >> /.profile (6 Replies)
Discussion started by: pjeedu2247
6 Replies

7. Linux

using firewall to block port

Hi, I will like to allow access to the mysql port (3306) to certain IP address. All other IP's should be automatically blocked. What is the best way to do this? (8 Replies)
Discussion started by: shantanuo
8 Replies

8. Linux

can ping without firewall; no port 631

Well, since I wrote the below, I've learned a little more about Samba, and got them to at least acknowledge each other. Still can't use Gaurd dog. Still cant print from one to the other. I'm learning I'm learning I recently installed mepis 7 on both my laptop and laptop. (I came... (0 Replies)
Discussion started by: Sonshyne5
0 Replies

9. Solaris

How to open SSH port on firewall?

Hi, So that potential responders will have an idea of what they're dealing with let me say that while I am a UNIX newbie I have been in IT for over 10 years. We have several SUN boxes running ver 5 of the OS that have been sitting dormant for some time as they were part of a now defunct... (3 Replies)
Discussion started by: pjewett
3 Replies
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

eurephiadm-fwprofiles

eurephiadm fwprofiles(7)												  eurephiadm fwprofiles(7)

NAME

       eurephiadm-fwprofiles - Configuring eurephia firewall profiles

SYNOPSIS

       eurephiadm  fwprofiles  --list|-l  [-v|--verbose]  [-a|--accessprofile  <acc.  ID>]  [-f|--fw-destination   <name>]  [-i|--uid	<user ID>]
       [-n|--username  <username>] [-c|--certid  <cert ID>] [-e|--email  <e-mail address>] [-d|--digest  <certificate SHA1 digest>]
       eurephiadm fwprofiles --add|-A [-d|--description <Description>] [-f|--fw-destination  <name>]
       eurephiadm fwprofiles --delete|-D [-a|--accessprofile  <acc. ID>] [-f|--fw-destination  <name>]

DESCRIPTION

       The eurephia plug-in can take advantage of the OS firewall to give a fine grained access control of each OpenVPN client.  The preconfigured
       firewall chains available to eurephia needs to be defined using this eurephiadm command.  When the firewall profiles are defined here, they
       can be assigned to the different user accesses you have enabled.

MODES

       Available modes for the fwprofiles command are:

       -A | --add
	      [-d|--description <Description>] [-f|--fw-destination  <name>]
	      Add a new firewall profile.  Both --description and --fw-destination are required.  The --description is just to give a human  read-
	      able description of the firewall profile name and is only used in the different reports available in eurephiadm.

       -D | --delete
	      [-a|--accessprofile  <acc. ID>] [-f|--fw-destination  <name>]
	      Delete a firewall profile.  Either --accessprofile or --fw-destination must be provided.

       -l | --list
	      [-v|--verbose]  [-a|--accessprofile  <acc.  ID>]	[-f|--fw-destination   <name>]	[-i|--uid   <user ID>] [-n|--username  <username>]
	      [-c|--certid  <cert ID>] [-e|--email  <e-mail address>] [-d|--digest  <certificate SHA1 digest>]
	      List available firewall profiles.  Without any arguments, a simple overview over all registered firewall profiles.  If the --verbose
	      argument is given, the list will be more comprehensive.

	      The  rest of the arguments are filters which is used to reduce the length of the list.  Multiple filters may be added, but they will
	      only work as additional "AND" argument in the query.

       -h | --help
	      <mode> Show a help screen.  Without any arguments, all modes are listed.	Providing a mode will show more information about the cho-
	      sen mode.

FILTERS

       These filters are used by the --list mode.

       -a | --accessprofile <id>
	      Numeric ID defining the access profile ID.

       -f | --fw-destination <name>
	      The firewall reference for the chain used by the OS when filtering the OpenVPN client traffic.

       -i | --uid <user id>
	      Numeric user ID

       -n | --username <username>
	      User name

       -c | --certid <certid>
	      Numeric reference to a certificate

       -e | --email <email addr>
	      e-mail address in certificates

       -d | --digest <SHA1 digest>
	      Certificate SHA1 digest

SEE ALSO

       eurephiadm(7), eurephiadm-usercerts(7)

AUTHOR

       Copyright (C) 2008-2010	David Sommerseth <dazo@users.sourceforge.net>

David Sommerseth						     July 2010						  eurephiadm fwprofiles(7)