How do I turn of the firewall?

[pal_frenger]

I want to turn off the RedHat default firewall.

I press:

The Hat -> System Settings -> Security Level

And in the nice little GUI tool I select:

Security level: No firewall

Then I press OK and Yes. Fine! Now it should be gone.

But it is still running on security level High.:mad:

Please. Help me turn it of. It blocks my httpd web server.

//Pål

[chrisnu]

I'm actually having the same problem as well. Can't adjust the Security Settings. Any suggestions would be welcome.

[z0mbix]

Have you tried /sbin/service iptables stop and /sbin/service ipchains stop as root?

[pal_frenger]

Hi,

Now I have tried it. This is what happens (In swedish):

# /sbin/service iptables stop
Tömmer alla kedjor: [ OK ]
Tar bort egendefinierade kedjor: [ OK ]
Återställer inbyggda kedjor till standard-ACCEPT-policyn: [ OK ]
# /sbin/service ipchains stop
ipchains: unrecognized service

Something is happening. Still, this doesn't help.

What I really want to do is to allow at least incomming HTTP traffic to my Apache web server. I don't really need to turn the firewall off completely.

Any suggestions? How do I configure the firewall? Is there some file in /etc that I can edit manually?

By the way, I'm using RedHat 8.0.

//Pål

[z0mbix]

Ok, have you run redhat-config-securitylevel to reconfigure the firewall settings.

http://www.redhat.com/docs/manuals/linux/RHL-8.0-Manual/custom-guide/ch-basic-firewall.html

[pal_frenger]

Yepp,

Thats the one I've been running all the time. It doesn't work. Not for me and not for chrisnu either it seems.

I can do all the changes I want to. But when I run the tool again to check if something has happened it is still security level high and still no incomming HTTP. And my webserver is still isolated from the internet by the firewall.

It doesn't work. Simple as that. Redhat must have forgotten to check that utility for bugs.

But there should be some file to edit manually.... Any clues?

//Pål

[teslag]

I have the same problem, lokkit or using the
security level program do nothing. Can change
in both and nothing, back the way it was. Has
anyone figured out a solution yet?

[rustskull]

Shamelessly C&P from:
http://www.europe.redhat.com/documentation/rhl8.0/rhl-sg-en-8.0/ch-fw.php3

+++++++++++++++
Saving and Restoring IPTables Rules

Firewall rules are only valid for the time the computer is on. If you reboot your system, the rules will be automatically flushed and reset. To save your rules so that they will load later, use the following command:

service iptables save

The rules will be stored in the file /etc/sysconfig/iptables and will be applied whenever the service is started, restarted, or the machine rebooted.
++++++++++++++++

Maybe this will help?

Red Hat (http://www.redhat.com) has this cool little box up in the right hand corner of the site that says "search". I typed in "firewall off" and got a bunch of hits. The above was one of them.

HTH

-rust

[gonzo6111]

hi all, rustskull i'm seeing the same thing a default when installing i put the setting no firewall i check it now and it shows high. i did try the command stated and i got the 3 response saying ok with no error does that mean it's all disable now newbie on linux . But boy i'm learning all source of stuff in this forum . Oh i try the command u said i get no bash: service: command not found what is that telling me . that it is off or no install correct. Any light on this subject would be appreciated. Oh the reason i'm really trying to find out why i can't get my windows to see inside linux but linux can see all. so it maybe that this is my problem .

[Hayl]

The Hat > Server Settings > Services (enter root password)

stop iptables
remove checkmark from iptables

there are a bunch of other things in there that can be stopped. here are some:

- apmd (esp if you don't run it on a laptop)
- atd - if you don't use it
- gpm - if you don't use it
-isdn - this was on on mine by default for some reason
- nfs and nfs lock
- pcmcia (esp if you don't run it on a laptop)
rhnsd - if you hate the redhat network thing that checks for updates - i disable it - it reminds me of the nasty one in xp
- sshd - if you don't need to ssh to your box

(remember to SAVE after you make your changes)