RH134 - ch14s03

In this lab, you will configure a firewall on your serverX system to block all access to services other than ssh and a web server running on port 8080/TCP.

Resources
Machines:	`serverX` and `desktopX`

Outcomes:

A firewall configured on serverX blocking access to services other than ssh and 8080/TCP.

Reset your serverX system.
Log into and set up your serverX system.
```
[student@serverX ~]$ lab firewall setup
```
Reset your desktopX system.

Your company has decided to run a new web app. This application listens on ports 80/TCP and 8080/TCP. Due to security considerations, only port 8080/TCP should be reachable from the outside world. It is understood that ssh (port 22/TCP) should also be available. All changes you make should persist across a reboot.

Important: The graphical interface used in the Red Hat Online Learning environment needs port 5900/TCP to remain available as well. This port is also known under the service name vnc-server. If you accidentally lock yourself out from your serverX, you can either attempt to recover by using ssh to your serverX machine from your desktopX machine, or reset your serverX machine. If you elect to reset your serverX machine, you will have to run the setup scripts for this lab again. The configuration on your machines already includes a custom zone called ROL that opens these ports.

When you are done with your work, reboot your serverX machine, then run the command lab firewall grade from your desktopX machine to verify your work.

Configure your system so that the iptables and ip6tables services will not be accidentally started by an administrator.
[student@serverX ~]$ sudo systemctl mask iptables [student@serverX ~]$ sudo systemctl mask ip6tables
Check if the firewalld service is running. If not, start it.
[student@serverX ~]$ sudo systemctl status firewalld
If the previous step indicated that firewalld was not enabled and/or running:
[student@serverX ~]$ sudo systemctl enable firewalld [student@serverX ~]$ sudo systemctl start firewalld

Verify that the default firewall zone is set to public.

[student@serverX ~]$ sudo firewall-cmd --get-default-zone
public

If the previous step returned another zone:

[student@serverX ~]$ sudo firewall-cmd --set-default-zone public

Verify that there are no unwanted ports open in the permanent configuration for the public zone.

[student@serverX ~]$ sudo firewall-cmd --permanent --zone=public --list-all
public (default)
  interfaces:
  sources:
  services: dhcpv6-client ssh
  ports:
  masquerade: no
  forward-ports:
  icmp-blocks:
  rich rules:

Add port 8080/TCP to the permanent configuration for the public zone. Verify your configuration.

[student@serverX ~]$ sudo firewall-cmd --permanent --zone=public --add-port 8080/tcp

[student@serverX ~]$ sudo firewall-cmd --permanent --zone=public --list-all
public (default)
  interfaces:
  sources:
  services: dhcpv6-client ssh
  ports: 8080/tcp
  masquerade: no
  forward-ports:
  icmp-blocks:
  rich rules:

Reboot your serverX machine. (For a quick test, you can also use sudo firewall-cmd --reload.)
From your desktopX machine, run lab firewall grade to verify your work.
[student@desktopX ~]$ lab firewall grade

Discuss Red Hat System Administration II

Go to community

Is It possible to reset root password when the system is on multi-user.target?

jennifer1987

27 lip 2023

Hi thereWell, i have a question, Is It possible to reset root password when the system is on multi-user.target? I was not be able to found a foro o some information related with this and another question that I have, If the grub menu dont show up, is it posible to reset the root password?

991

Red Hat System Administration II (RH134)

Haley_Ruccio

21 lip 2023

Build the skills to perform the key tasks needed to become a full-time Linux administratorRed Hat System Administration II (RH134) is the second part of the RHCSA training track for IT professionals who have already attended Red Hat System Administration I. The course goes deeper into core Linux system administration skills in storage configuration and management, installation and deployment of Red Hat Enterprise Linux, management of security features such as SELinux, control of recurring system tasks, management of the boot process and troubleshooting, basic system tuning, and command-line automation and productivity. This course assumes that students have attended Red Hat System Administration I (RH124).Experienced Linux administrators who seek rapid preparation for the RHCSA certification should instead start with RHCSA Rapid Track (RH199).This course is based on Red Hat Enterprise Linux 9.0.Course summaryInstall Red Hat Enterprise Linux using scalable methodsAccess security files, file systems, and networksExecute shell scripting and automation techniquesManage storage devices, logical volumes, and file systemsManage security and system accessControl the boot process and system servicesRun containersAudience for this courseThis course is geared toward Windows system administrators, network administrators, and other system administrators who are interested in supplementing current skills or backstopping other team members, in addition to Linux system administrators who are responsible for these tasks:Configuring, installing, upgrading, and maintaining Linux systems using established standards and proceduresProviding operational supportManaging systems for monitoring system performance and availabilityWriting and deploying scripts for task automation and system administrationRecommended trainingSuccessful completion of Red Hat System Administration I (RH124) is recommended.Experienced Linux administrators seeking to accelerate their path toward becoming a Red Hat Certified System Administrator should start with the RHCSA Rapid Track course (RH199).Take our free assessment to gauge whether this offering is the best fit for your skills.Technology considerationsThere are no special technology requirements.This course is not designed for bring your own device (BYOD).Internet access is not required, but is recommended to allow students to research and access Red Hat online resources.

Welcome to the Red Hat System Administration II (RH134) group in the Red Hat Learning Community!

Deanna

18 lip 2023

We are excited to launch a space dedicated to the Red Hat Training course Red Hat System Administration II! To gain the most value from this group - click the "Join Group" button in the upper right hand corner.We encourage group members to collaborate in this group to discuss topics, ask questions, share best practices and tips, provide course feedback, and share their accomplishments as it relates to RH134.Read more about Red Hat System Administration II here.

417

Revision: rh134-7-63a207e