Defaultnya centos sudah membawa firewall ketika di install, seperti dinyatakan oleh wiki.centos.org : “CentOS has an extremely powerful firewall built in, commonly referred to as iptables, but more accurately is iptables\/netfilter”.<\/p>\n
Kita hanya perlu melakukan penyesuaian agar port2 yang diperlukan saja yang dapat diakses menuju server kita, untuk melakukan pengujian port bisa menggunakan :<\/p>\n
http:\/\/mxtoolbox.com\/PortScan.aspx<\/p>\n
Langkah-langkah penyesuaian konfigurasi iptables sebagai berikut :<\/p>\n
1. rpm -qa iptables # memeriksa paket iptables apakah sudah terpasang?
\n2. iptables -L -n # memeriksa apa saja list iptables yang sedang berjalan\/aktif
\n3. iptables -F; iptables -X; iptables -Z # flush\/pembersihan terhadap isi rule iptables<\/p>\n
untuk memudahkan pengaturan rule iptables bisa dengan membuat sebuah file yang berisi aturan iptables dan menjalankannya ketika sistem boot :<\/p>\n
4. touch \/etc\/myfirewall.sh
\n5. nano \/etc\/firewall.sh # kopi dan paste teks dibawah ke firewall.sh<\/p>\n
### awal file ###<\/p>\n
#!\/bin\/bash
\n iptables -F
\n#
\n# Allow SSH connections on tcp port 22 and port 80 (http)
\n# tambahkan baris untuk port yang diijinkan untuk diakses seperti contoh dibawah ini
\n# bila ssh dijalankan selain di port 22, sesuaikan dengan port yang digunakannya.
\n#
\n iptables -A INPUT -p tcp –dport 22 -j ACCEPT
\n iptables -A INPUT -p tcp –dport 80 -j ACCEPT
\n#
\n# Set default policies for INPUT, FORWARD and OUTPUT chains
\n#
\n iptables -P INPUT DROP
\n iptables -P FORWARD DROP
\n iptables -P OUTPUT ACCEPT
\n#
\n# Set access for localhost
\n#
\n iptables -A INPUT -i lo -j ACCEPT
\n#
\n# Accept packets belonging to established and related connections
\n#
\n iptables -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
\n#
\n# Save settings
\n#
\n \/sbin\/service iptables save
\n#
\n# List rules
\n#
\n iptables -L -v<\/p>\n
### akhir file ###<\/p>\n
6. chmod +x \/etc\/myfirewall.sh
\n7. \/etc\/.\/myfirewall.sh # ujicoba menjalankan file secara manual
\n8. nano \/etc\/rc.local<\/p>\n
tambahkan autostart pada rc.local agar file myfirewall.sh dijalankan otomatis ketika sistem di reboot, menjadi :<\/p>\n
\/etc\/.\/myfirewall.sh
\ntouch \/var\/lock\/subsys\/local<\/p>\n
9. reboot server
\n10. iptables -L -v # untuk mengecek kembali iptables\/firewall sudah dijalankan pada server
\n11. http:\/\/mxtoolbox.com\/PortScan.aspx # cek kembali port yang open di server<\/p>\n
selamat mencoba…DWYOR!<\/p>\n
ref :
\n1. https:\/\/wiki.centos.org\/HowTos\/Network\/IPTables
\n2. https:\/\/www.vultr.com\/docs\/setup-iptables-firewall-on-centos-6<\/p>\n","protected":false},"excerpt":{"rendered":"
Defaultnya centos sudah membawa firewall ketika di install, seperti dinyatakan oleh wiki.centos.org : “CentOS has an extremely powerful firewall built in, commonly referred to as iptables, but more accurately is iptables\/netfilter”. Kita hanya perlu melakukan penyesuaian agar port2 yang diperlukan saja yang dapat diakses menuju server kita, untuk melakukan pengujian port bisa menggunakan : http:\/\/mxtoolbox.com\/PortScan.aspx […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-60","post","type-post","status-publish","format-standard","hentry","category-linux-server"],"_links":{"self":[{"href":"https:\/\/kloxo.web.id\/index.php?rest_route=\/wp\/v2\/posts\/60","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kloxo.web.id\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kloxo.web.id\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kloxo.web.id\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kloxo.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=60"}],"version-history":[{"count":3,"href":"https:\/\/kloxo.web.id\/index.php?rest_route=\/wp\/v2\/posts\/60\/revisions"}],"predecessor-version":[{"id":63,"href":"https:\/\/kloxo.web.id\/index.php?rest_route=\/wp\/v2\/posts\/60\/revisions\/63"}],"wp:attachment":[{"href":"https:\/\/kloxo.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=60"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kloxo.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=60"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kloxo.web.id\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=60"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}