Last active
April 10, 2016 01:34
-
-
Save cjjavellana/d9e50383d6f639f1ada71d91b0e7354b to your computer and use it in GitHub Desktop.
IP table configuration of my utility server
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Firewall configuration written by system-config-firewall | |
# Manual customization of this file is not recommended. | |
*filter | |
:INPUT ACCEPT [0:0] | |
:FORWARD ACCEPT [0:0] | |
:OUTPUT ACCEPT [0:0] | |
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT | |
-A INPUT -p icmp -j ACCEPT | |
-A INPUT -i lo -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT | |
# Zookeeper Port | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2181 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 9092 -j ACCEPT | |
# ActiveMQ Web Console | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 8161 -j ACCEPT | |
# ActiveMQ Jms Port | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 61616 -j ACCEPT | |
# Hadoop Ports | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 50070 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 1527 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 50075 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 50475 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 50105 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 50470 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2181 -j ACCEPT | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 50090 -j ACCEPT | |
-A INPUT -m state --state NEW -m multiport -p tcp --dports 8030:8100 -j ACCEPT | |
# Ignite Ports | |
-A INPUT -m state --state NEW -m tcp -p tcp --dport 47500 -j ACCEPT | |
-A INPUT -j REJECT --reject-with icmp-host-prohibited | |
-A FORWARD -j REJECT --reject-with icmp-host-prohibited | |
COMMIT | |
# Enabling Multicast OSX | |
$ ifconfig -a | |
$ netstat -nr | |
$ sudo route -nv add -net 228.0.0.4 -interface en0 | |
$ sudo tcpdump -ni en0 host 228.0.0.4 | |
-> On all machines you want multicast enabled | |
$ ping -t 1 -c 2 228.0.0.4 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment