So assuming he uses the old iptables service, then the canonical way to modify is to edit /etc/sysconfig/iptables. If you install the bash-completion package, after re-logging in, firewall-cmd autocompletes, making it really easy to use.Įdit: OP indicates he does not use firewall-cmd. Once you have verified that it works, then you can run it again with the permanent switch to make it stick after reboots: firewall-cmd -add-service=postgresql -permanent With that assumption in place, then you can simply run this on your postgresql host: firewall-cmd -add-service=postgresql I assume you have not because you would have mentioned it otherwise.
I use the same base firewalls (not what is listed above) on another server for serving redis and it works correctly.įirewalld has been disabled on this box in favor of iptables, mostly for familiarity purposes.Ġ0.000.000.00 replaces the IP of the computer I am actually usingĬentos7 uses firewall-cmd out of the box, unless you have disabled it. I run the same ncat command, I get Ncat: Connection refused If I try settings -I INPUT -p tcp -s 00.000.000.00 -dport 5432 -j ACCEPT When I use this setting and run nc ipofserver 5432 I get Ncat: connection timed out The one the guide recommends: -A INPUT -p tcp -s 0/0 -sport 1024:65535 -d 00.000.000.00 -dport 5432 -m state -state NEW,ESTABLISHED -j ACCEPT I have it setup so I have a /tmp/v4 that I can modify and just restore my firewall rules from. I am attempting to follow this guide to allow remote connections to postgres Īt the moment I am running into issues with the firewall.
0 kommentar(er)
