Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm having a problem with ZenOss. I installed the centos stack installer on Centos 5.5 x64. De installation succeeded and no errors where displayed. But when I tried to surft to the ip address it doesn't respond. Then I added an exception to the iptables firewall. But still no response. Can anyone tell me what other problem there could be?

I used these lines for the firewall exception

iptables -A INPUT -p tcp --dport 8080 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 8080 -j ACCEPT

The output of iptables -L

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:webcache 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
RH-Firewall-1-INPUT  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     tcp  --  anywhere             anywhere            tcp spt:webcache 

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            
ACCEPT     icmp --  anywhere             anywhere            icmp any 
ACCEPT     esp  --  anywhere             anywhere            
ACCEPT     ah   --  anywhere             anywhere            
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns 
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp 
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp 
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED 
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh 
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited 
share|improve this question

1 Answer 1

iptables -I INPUT 1 -p tcp --dport 8080 -j ACCEPT

or

iptables -I RH-Firewall-1-INPUT 7 -p tcp --dport 8080 -j ACCEPT

or edit /etc/sysconfig/iptables

share|improve this answer
    
If I want to add SNMP ports. Do I need to use iptables -I INPUT 2 -p tcp --dport 161 -j ACCEPT and iptables -I INPUT 3 -p udp --dport 161 -j ACCEPT? –  Lars Blockken Jan 23 '11 at 18:07
    
Yes, you need add access rules to 161 port. –  osdyng Jan 23 '11 at 23:05
    
I've been a bit lazy learning IP tables, I use the system-config-network-security-tui to add the port. Seems to work fine. I'm pretty sure you're going to want to open port 162 (trap receiver). 161 is for the SNMP daemon which can respond to OID requests. –  SpacemanSpiff May 9 '11 at 14:24

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.