Red Hat NETWORK SATELLITE 5.3.0 - CHANNEL MANAGEMENT, Справочное руководство

Страница: 210 / 318

Chapter 11. Cobbler
198
11.1.5.2. IPTables Configuration
Once you have configured SELinux, you must then configure IPTables to allow incoming and outgoing
network traffic on the Cobbler server.
If you have an existing firewall ruleset using IPTables, you need to add the following rules to open
the requisite Cobbler-related ports. The following lists each of the requisite rules with their associated
service.
• For TFTP:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j
ACCEPT
/sbin/iptables -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j
ACCEPT
• For HTTPD:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j
ACCEPT
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j
ACCEPT
• For Cobbler:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p udp --dport 25150
-j ACCEPT
• For Koan:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 25151
-j ACCEPT
Once those firewall rules are entered, be sure to save the firewall configuration:
/sbin/iptables-save
11.1.6. Syncing and Starting the Cobbler Service
Once all the prerequisites specified in
cobbler check
are met, you can now start the Cobbler
service.
First, ensure that the configuration files are all synchronized by running the following command: