Red Hat ENTERPRISE LINUX 5 - VIRTUAL SERVER ADMINISTRATION, Руководство по установке

Страница: 323 / 388

Kickstart Options
305
firewall ­­­enabled|­­disabled [­­trust=] <device> [­­port=]
•
--enabled
or
--enable
— Reject incoming connections that are not in response to outbound
requests, such as DNS replies or DHCP requests. If access to services running on this machine
is needed, you can choose to allow specific services through the firewall.
•
--disabled
or
--disable
— Do not configure any iptables rules.
•
--trust=
— Listing a device here, such as eth0, allows all traffic coming from that device to
go through the firewall. To list more than one device, use
--trust eth0 --trust eth1
. Do
NOT use a comma-separated format such as
--trust eth0, eth1
.
•
<incoming>
— Replace with one or more of the following to allow the specified services
through the firewall.
•
--ssh
•
--telnet
•
--smtp
•
--http
•
--ftp
•
--port=
— You can specify that ports be allowed through the firewall using the port:protocol
format. For example, to allow IMAP access through your firewall, specify
imap:tcp
. Numeric
ports can also be specified explicitly; for example, to allow UDP packets on port 1234 through,
specify
1234:udp
. To specify multiple ports, separate them by commas.
firstboot
(optional)
Determine whether the
Setup Agent
starts the first time the system is booted. If enabled, the
firstboot
package must be installed. If not specified, this option is disabled by default.
•
--enable
or
--enabled
— The
Setup Agent
is started the first time the system boots.
•
--disable
or
--disabled
— The
Setup Agent
is not started the first time the system boots.
•
--reconfig
— Enable the
Setup Agent
to start at boot time in reconfiguration mode. This
mode enables the language, mouse, keyboard, root password, security level, time zone, and
networking configuration options in addition to the default ones.
halt
(optional)
Halt the system after the installation has successfully completed. This is similar to a manual
installation, where anaconda displays a message and waits for the user to press a key before
rebooting. During a kickstart installation, if no completion method is specified, the
reboot
option
is used as default.
The
halt
option is roughly equivalent to the
shutdown -h
command.
For other completion methods, refer to the
poweroff
,
reboot
, and
shutdown
kickstart options.
graphical
(optional)
Perform the kickstart installation in graphical mode. This is the default.