Been on this issues couples of days now, but getting a negative result, after installing the iptables and configuring the rules for accept and drop configuration, Pls help review and revised ASAP.
Attached is the task/assessment; We have one of our websites up and running on our Nautilus infrastructure in Stratos DC. Our security team has raised a concern that right now Apache’s port i.e 8086 is open for all since there is no firewall installed on these hosts. So we have decided to add some security layer for these hosts and after discussions and recommendations we have come up with the following requirements:
-
Install
iptablesand all its dependencies on each app host. -
Block incoming port
8086on all apps for everyone except for LBR host. -
Make sure the rules remain, even after system reboot.