Advertisement
Guest User

Untitled

a guest
Jun 7th, 2021
270
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.59 KB | None | 0 0
  1. Oracle Cloud Firewall How To.
  2.  
  3. Inside the WebAdmin App:
  4.  
  5. Hamburger Menu > Pinned Links > Compute / Instances
  6.  
  7. Click on your instance name
  8.  
  9. Under Primary VINC
  10.  
  11. Click on the Subnet: link
  12.  
  13. Under Security Lists
  14.  
  15. Click on Default Security List for subnet name
  16.  
  17. Under Ingress Rules
  18.  
  19. Click Add Ingress Rules
  20.  
  21. For each Rule:
  22.  
  23. Source CIDR: 0.0.0.0/0
  24.  
  25. IP Protocol: TCP
  26.  
  27. Destination Port Range: 6667
  28.  
  29. Click "Add Ingress Rules"
  30.  
  31. and click Add Ingress Rules again...
  32.  
  33. Fill in the fields as before but for the following destination port ranges each time: 6697, 6900
  34.  
  35. Repeat the above but with ::/0 for Source CIDR for IPv6
  36.  
  37. It should look similar to this when done:
  38.  
  39. https://i.imgur.com/SzPFQha.png
  40.  
  41. You may need to click under "Resources" in the sidebar and "Egress Rules"
  42.  
  43. and add two Egress Rules.
  44.  
  45. One for Destination CIDR: 0.0.0.0/0
  46.  
  47. And one for Destination CIDR: ::/0
  48.  
  49. It should look like this when done: https://i.imgur.com/oFjS0E1.png
  50.  
  51. ---
  52.  
  53. Further Firewall opening:
  54.  
  55. Inside the SSH Prompt for Ubuntu servers:
  56.  
  57. IP Tables Firewall unlocking (you may need to do this more than once, like after a server reboot)
  58.  
  59. sudo nano /etc/iptables/rules.v4
  60.  
  61. Remove these two lines
  62.  
  63. -A INPUT -j REJECT --reject-with icmp-host-prohibited
  64. -A FORWARD -j REJECT --reject-with icmp-host-prohibited
  65.  
  66. Save.
  67.  
  68. Then:
  69.  
  70. sudo iptables -L INPUT
  71.  
  72. If this still shows:
  73.  
  74. REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
  75.  
  76. Do this:
  77.  
  78. iptables -D INPUT -j REJECT --reject-with icmp-host-prohibited
  79.  
  80. ---
  81.  
  82. That SHOULD do it at least for IPv4.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement