Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Robert Moskowitz
On 03/27/2017 09:23 PM, Mike wrote: Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? mark Ahh, I did not know of this. Well, I'm back to suggesting OP take a little time and get comfortable with firewall-cmd in the te

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? mark Ahh, I did not know of this. Well, I'm back to suggesting OP take a little time and get comfortable with firewall-cmd in the terminal. If we want our solid redhat clone

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Ned Slider
On 27/03/17 22:43, Valeri Galtsev wrote: On Mon, March 27, 2017 3:58 pm, Mike wrote: I don't think it's going to give you a web-based firewall configuration tool. Firewall/router system I use is pfSense: https://pfsense.org/ It has nice web interface for configuration of everything, based o

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Gordon Messmer
On 03/27/2017 02:31 PM, m.r...@5-cent.us wrote: Has that changed? That answer is probably subjective. I'll probably never trust it, but the number of recent known critical exploits isn't as high as it used to be: https://www.cvedetails.com/vulnerability-list/vendor_id-358/Webmin.html

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Valeri Galtsev
On Mon, March 27, 2017 3:58 pm, Mike wrote: > I don't think it's going to give you a web-based firewall configuration > tool. Firewall/router system I use is pfSense: https://pfsense.org/ It has nice web interface for configuration of everything, based on FreeBSD (very slim, lightweight, small

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread m . roth
Mike wrote: > Nice catch, Mr. Schumacher ---> The following modules are included as > standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz > Configure a Linux firewall using FirewallD, by editing allowed > services and ports. > > This is likely the right tool for the job. > Webmin use

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
yum (CentOS/RedHat/Fedora) By adding the Webmin repository and Jamie Cameron's key, it is possible to install & maintain the latest Webmin/Usermin versions. The following will install the latest Webmin version by adding the webmin-repo and corresponding GPG key. Yum will resolve all the necessary

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
Nice catch, Mr. Schumacher ---> The following modules are included as standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz Configure a Linux firewall using FirewallD, by editing allowed services and ports. This is likely the right tool for the job. On Mon, Mar 27, 2017 at 5:00 PM, M

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Michael Schumacher
Hi, > I recently converted my employer's firewall from pure iptabes to > firewalld and looked for something similar, more along the lines of > webmin, etc. funny, my webmin installation on a banana-pi has webmin 1.831, which has support for firewalld. I am not sure, but I believe I got it direct

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
I don't think it's going to give you a web-based firewall configuration tool. It does allow you to control/configure networking hardware and devices via NetworkManager, but I don't believe it goes further than that for networking. Ironically, it does provide a an ssh-like session terminal where you

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Robert Moskowitz
On 03/27/2017 03:24 PM, Mike wrote: I recently converted my employer's firewall from pure iptabes to firewalld and looked for something similar, more along the lines of webmin, etc. I didn't find anything close to a match. In the end, it all came down to getting comfortable with "firewall-cmd"

Re: [CentOS] Does fail2ban protect anything other than SSH logins?

2017-03-27 Thread Jon LaBadie
On Mon, Mar 27, 2017 at 02:44:16PM -0500, Robert Moskowitz wrote: > I am looking at fail2ban, and all I see is it protecting remote logins to > SSH. > > Does it protect any other access to systems? Well perhaps other than VNC > perhaps? > > thank you > Look at /etc/fail2ban/jail.conf. Mine li

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
I recently converted my employer's firewall from pure iptabes to firewalld and looked for something similar, more along the lines of webmin, etc. I didn't find anything close to a match. In the end, it all came down to getting comfortable with "firewall-cmd" in the shell. Haven't used suricata, so

Re: [CentOS] Does fail2ban protect anything other than SSH logins?

2017-03-27 Thread David Nelson
> On Mar 27, 2017, at 12:44, Robert Moskowitz wrote: > > I am looking at fail2ban, and all I see is it protecting remote logins to SSH. > > Does it protect any other access to systems? Well perhaps other than VNC > perhaps? > > thank you It can, but you have to either enable or create the r

[CentOS] Does fail2ban protect anything other than SSH logins?

2017-03-27 Thread Robert Moskowitz
I am looking at fail2ban, and all I see is it protecting remote logins to SSH. Does it protect any other access to systems? Well perhaps other than VNC perhaps? thank you ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/l

[CentOS] firewalld management on a headless server

2017-03-27 Thread Robert Moskowitz
Is there an Apache tool to manage firewalld on a headless server? I am looking forward to my next Centos project which is to replace my Juniper SSG5 firewall... And along that line, what overlap, if any between firewalld and Suricata? thank you ___

Re: [CentOS] Systemd interface rename does not work

2017-03-27 Thread Marcelo Roccasalva
On Sun, Mar 26, 2017 at 9:16 AM, Matt . wrote: > > Hi, > > I'm moving to Systemd for my network management but I don't see my > link name changed when I try to using a .link name. > > The .network file works right, networkmanager is removed as well to > accomplish this. > > Any idea why the rename

Re: [CentOS] Systemd interface rename does not work

2017-03-27 Thread Oberdorfer Patrick
Hi, i dont know what way you prefer to archieve network interface renaming, what I do is set specific udev rules. user@host# cat /etc/udev/rules.d/60-net.rules SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="00:00:50:cc:19:0a", ATTR{type}=="1", NAME="eth0" SUBSYSTEM=="net", ACTION=="add", ATTR{a