Oracle Linux/Installing - Revision history

R00t at 07:00, 5 February 2017

2017-02-05T07:00:13Z

R00t at 02:49, 5 February 2017

2017-02-05T02:49:08Z

R00t: /* Load new rules */

2016-09-28T00:50:11Z

‎Load new rules

R00t: /* iptables */

2016-09-28T00:45:35Z

‎iptables

R00t at 00:43, 28 September 2016

2016-09-28T00:43:20Z

R00t: /* Sudoers Config */

2016-09-27T21:22:34Z

‎Sudoers Config

R00t: /* Sudoers Config */

2016-09-27T21:20:35Z

‎Sudoers Config

R00t at 21:19, 27 September 2016

2016-09-27T21:19:17Z

R00t: /* Network Config */

2014-04-29T00:08:24Z

‎Network Config

R00t at 00:07, 29 April 2014

2014-04-29T00:07:06Z

@@ Line 55: / Line 55: @@
 ==Sudoers Config==
-Personally I prefer to use a group for sudoer management.  Specify a unique UID so that it will be the same on all servers (manually dictate).
+Personally I prefer to use a group for sudoer management.  Specify a unique UID so that it will be the same on all servers (manually dictate).<br>
   <nowiki># groupadd -g <unique UID> sudo
 ie. #sudo groupadd -g 500 sudo</nowiki>

@@ Line 26: / Line 26: @@
 ip.address	fqdn.hostname
 </nowiki>
 ====connect on boot====
 By default the network interface comes turned off on boot.
@@ Line 41: / Line 42: @@
 Change it so it automatically starts and connects on boot
   <nowiki>ONBOOT=yes</nowiki>
 ==Setup yum Repo==

@@ Line 91: / Line 91: @@
 # sudo iptables -A INPUT -i lo -j ACCEPT
 # sudo iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 22 -j ACCEPT -m comment --comment "SSH - Internal"
 # sudo iptables -P FORWARD DROP
 # sudo iptables -P INPUT DROP </nowiki>

@@ Line 82: / Line 82: @@
 iptables -P FORWARD ACCEPT
 iptables -P OUTPUT ACCEPT</nowiki>
+Now save this change:
 ===Load new rules===
 Here are some basic rules to allow basic outbound traffic and 22 inbound from internal connections.
@@ Line 91: / Line 93: @@
 # sudo iptables -P FORWARD DROP
 # sudo iptables -P INPUT DROP </nowiki>

← Older revision		Revision as of 00:43, 28 September 2016
Line 69:		Line 69:
	With Oracle Linux 6.8, openssh should be installed by default, but if it isnt:		With Oracle Linux 6.8, openssh should be installed by default, but if it isnt:
	<nowiki>#yum install openssl openssh-server</nowiki>		<nowiki>#yum install openssl openssh-server</nowiki>
		+
		+	==iptables==
		+	Oracle Linux comes preloaded with some default rules which i've had issues with when attempting to remote ssh. my opinion is to flush them and load up more specific defaults.
		+	===flush===
		+	<nowiki># iptables -F
		+	iptables -X
		+	iptables -t nat -F
		+	iptables -t nat -X
		+	iptables -t mangle -F
		+	iptables -t mangle -X
		+	iptables -P INPUT ACCEPT
		+	iptables -P FORWARD ACCEPT
		+	iptables -P OUTPUT ACCEPT</nowiki>
		+
		+	===Load new rules===
		+	Here are some basic rules to allow basic outbound traffic and 22 inbound from internal connections.
		+	<nowiki>
		+	# sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
		+	# sudo iptables -A INPUT -i lo -j ACCEPT
		+	# sudo iptables -A INPUT -s 10.0.0.0/8 -p tcp --dport 22 -j ACCEPT -m comment --comment "SSH - Internal"
		+	# sudo iptables -P FORWARD DROP
		+	# sudo iptables -P INPUT DROP </nowiki>

@@ Line 61: / Line 61: @@
 Add new user(s) and make them a part of the new sudo group
-  <nowiki># useradd -G sudo -u <unique UID> user_a</nowiki>
+  <nowiki># useradd -G sudo -u <unique UID> user_a
 Change the password of the user
   <nowiki># passwd <username></nowiki>

@@ Line 51: / Line 51: @@
 ==Sudoers Config==
 Personally I prefer to use a group for sudoer management.  Specify a unique UID so that it will be the same on all servers (manually dictate).
-  <nowiki># groupadd -g <unique UID> sudo</nowiki>
+  <nowiki># groupadd -g <unique UID> sudo
 Now we can add the group to the sudoers file
   <nowiki># visudo

@@ Line 9: / Line 9: @@
 ==Network Config==
 If you installed the basic package, most likely the NIC is not configured for DHCP. try:<br>
-  User ~ $ system-config-network
+  <nowiki>User ~ $ system-config-network</nowiki>
 Once DHCP is configured, the next step is to restart the NIC.<br>
-  User ~ $ ifdown eth0
+  <nowiki>User ~ $ ifdown eth0
- User ~ $ ifup eth0
+User ~ $ ifup eth0
- Determining IP information for eth0... done.
+Determining IP information for eth0... done.
- User ~ $ifconfig eth0
+User ~ $ifconfig eth0</nowiki>
 Make sure your hostname is defined in /etc/sysconfig/network
-  HOSTNAME=server.fqdn.com
+  <nowiki>HOSTNAME=server.fqdn.com</nowiki>
 Also for the network config, put your FQDN in the hosts file @ /etc/hosts
-.0.0.1   server.fqdn.com
+  <nowiki>127.0.0.1   server.fqdn.com
- ::1   server.fqdn.com
+::1   server.fqdn.com
 ====connect on boot====
 By default the network interface comes turned off on boot.
-  ~$ sudo cat /etc/sysconfig/network-scripts/ifcfg-eth0
+  <nowiki>~$ sudo vi /etc/sysconfig/network-scripts/ifcfg-eth0
- DEVICE=eth0
+DEVICE=eth0
- HWADDR=00:0c:29:4f:09:c8
+HWADDR=00:0c:29:4f:09:c8
- TYPE=Ethernet
+TYPE=Ethernet
- UUID=5eed1f7e-74da-4841-b03b-3d4cc0812ade
+UUID=5eed1f7e-74da-4841-b03b-3d4cc0812ade
- ONBOOT=no
+ONBOOT=no
- NM_CONTROLLED=yes
+NM_CONTROLLED=yes
- BOOTPROTO=dhcp
+BOOTPROTO=dhcp
- USERCTL=no
+USERCTL=no
- PEERDNS=yes
+PEERDNS=yes
- IPV6INIT=no
+IPV6INIT=no</nowiki>
 Change it so it automatically starts and connects on boot
-  ONBOOT=yes
+  <nowiki>ONBOOT=yes</nowiki>
 ==Setup yum Repo==
@@ Line 43: / Line 48: @@
   # yum repolist
   # yum update