doc update remove iptable opening of port 5672 postgres for non-distributed install

This commit is contained in:
Michael James 2018-01-24 09:32:34 -07:00
parent 8fe6ecb253
commit 2d2af073fd
3 changed files with 3 additions and 6 deletions

View file

@ -42,7 +42,6 @@ It is required that ports 5432 and 5672 be open for the specific IP addresses of
-A INPUT -p icmp --icmp-type any -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 5672 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9581 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9582 -j ACCEPT
-A INPUT -s 10.0.0.7 -j EDEX
@ -55,7 +54,7 @@ It is required that ports 5432 and 5672 be open for the specific IP addresses of
Note the line **`-A INPUT -s 10.0.0.7 -j EDEX`** as well as the following **`-A EDEX ...`** rules for ports 5432 (PostgreSQL) and 5672 (PyPIES/HDF5).
!!! Note "The three ports left open to all connections (5672,9581,9582) in addition to default port 22 are for outside CAVE client connections"
!!! Note "The two ports left open to all connections (9581,9582) in addition to default port 22 are for outside CAVE client connections"
### 3. Database Config

View file

@ -60,9 +60,8 @@ and after install
2. **/etc/sysconfig/iptables**
To serve data from an EDEX server, iptables must allow TCP connections on ports **5672**, **9581** and **9582**. The following lines added to `/etc/sysconfig/iptables`, followed by the command `service iptables restart`, will configure iptables for EDEX.
To serve data from an EDEX server, iptables must allow TCP connections on ports **9581** and **9582**. The following lines added to `/etc/sysconfig/iptables`, followed by the command `service iptables restart`, will configure iptables for EDEX.
-A INPUT -p tcp -m tcp --dport 5672 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 9581 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 9582 -j ACCEPT

View file

@ -108,7 +108,6 @@ Configure iptables to allow TCP connections on ports 9581 and 9582 if you want t
-A INPUT -j EXTERNAL
-A EXTERNAL -j REJECT
-A EDEX -m state --state NEW -p tcp --dport 22 -j ACCEPT
-A EDEX -m state --state NEW -p tcp --dport 5672 -j ACCEPT
-A EDEX -m state --state NEW -p tcp --dport 9581 -j ACCEPT
-A EDEX -m state --state NEW -p tcp --dport 9582 -j ACCEPT
-A EDEX -j REJECT