Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This is puzzling to me because I did a fresh-install, coming from Fedora 14 where I did not have this issue at all. The firewall appears to be blocking all of my services, if I stop the iptables service then I can connect.

Out of 'iptables -L -n -v'

Chain INPUT (policy ACCEPT 0 packets, 0 bytes) 
pkts bytes target     prot opt in     out     source               destination 
5842 5881K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0    
0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0    
33  1932 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
1113 64847 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) 
pkts bytes target     prot opt in     out     source               destination 
0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT 4897 packets, 450K bytes) 
pkts bytes target     prot opt in     out     source               destination
share|improve this question

1 Answer 1

up vote 2 down vote accepted

I don't think packages in Fedora install firewall rules to allow themselves. Generally in the firewall setup part of the install you have to add access for http and other ports.

Look at the /etc/sysconfig/iptables script file. In there you will see a rule for tcp port 22 (ssh). You can copy that rule and change the port to 80. Then run "iptables-restore < /etc/sysconfig/iptables" Or just use the firewall configuration tool to add access for the additional ports you need.

share|improve this answer
    
Thanks. This did the job. Do you have any tips for managing a firewall? –  t3hb4tman May 15 '11 at 20:17
    
There are tools but I would recommend just figuring out iptables. It isn't too hard for most basic cases. Fedora default policy of DENY is a good one, just open up only the ports you need. And for those you might want to restrict it further by allowing new connections from selected source IP addresses only using the -s <SRC IP> switch. –  mfarver May 17 '11 at 14:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.