Opening, blocking and changing ports on RedHat

[Stephen]

I was about to say SSH is a trusted service.

On Tue, Jan 4, 2011 at 1:13 PM, keith smith <klsmith2020 at yahoo.com> wrote:

> Ok,  Thanks!  No GUI on these boxes. All CL.
>
> ------------------------
> Keith Smith
>
> --- On *Tue, 1/4/11, JD Austin <jd at twingeckos.com>* wrote:
>
>
> From: JD Austin <jd at twingeckos.com>
> Subject: Re: Opening, blocking and changing ports on RedHat
> To: "Main PLUG discussion list" <plug-discuss at lists.plug.phoenix.az.us>
> Date: Tuesday, January 4, 2011, 1:02 PM
>
>
> Yes however you can open the port from the GUI under
> system-> administration -> security level and firewall
> if you don't want to poke around on the command line.
> Likely the reason you don't have to open the special service for ssh is
> that sshd is a trusted service.
> JD
> On Tue, Jan 4, 2011 at 12:52, keith smith <klsmith2020 at yahoo.com<http://mc/compose?to=klsmith2020@yahoo.com>
> > wrote:
>
>
>
> Hi,
>
> I'm working on several CentOS and one RHEL servers.  I needed to open a
> port the other day so I did a search and the info I found lead me to believe
> the only way to open or close a port was via iptables.  Is that the complete
> story?
>
> For example, if I want to open port 3306 for MySql I need two things?  1)
> The port needs to be listed in /etc/services (RedHat) and 2) the port needs
> to be opened via iptables.
>
> If I use a non-standard port (3306) I must add a line to the /etc/my.conf
> that defines the port such as "port=xxxx".
>
> Here is a twist.  I set my SSHD to port 2200 but did not change
> /etc/services, which lists ici on port 2200 for both tcp and udp.  I am able
> to shell in using port 2200.  Why no conflict?
>
> Thank you for your insight.
>
>
>
> ------------------------
> Keith Smith
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us<http://mc/compose?to=PLUG-discuss@lists.plug.phoenix.az.us>
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
>
> -----Inline Attachment Follows-----
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us<http://mc/compose?to=PLUG-discuss@lists.plug.phoenix.az.us>
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>



-- 
A mouse trap, placed on top of your alarm clock, will prevent you from
rolling over and going back to sleep after you hit the snooze button.

Stephen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20110104/5c3b1791/attachment.html>