From 4ef4b565d5bf969c11b5b58762e203bdf12a9cc6 Mon Sep 17 00:00:00 2001 From: Rene Pedersen Date: Sat, 19 May 2018 14:21:49 +0400 Subject: [PATCH 1/2] Changes to firewall to allow 8090 access from anywhere as well as explaining use of --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/README.md b/README.md index cddc5d2..a09ab6a 100644 --- a/README.md +++ b/README.md @@ -35,11 +35,10 @@ In addition, the following ports must be opened for factomd to function which w An example using `iptables`: ``` sudo iptables -A INPUT ! -s 54.171.68.124/32 -p tcp -m tcp --dport 2376 -m conntrack --ctstate NEW,ESTABLISHED -j REJECT --reject-with icmp-port-unreachable -sudo iptables -A DOCKER-USER ! -s 54.171.68.124/32 -i -p tcp -m tcp --dport 8090 -j REJECT --reject-with icmp-port-unreachable sudo iptables -A DOCKER-USER ! -s 54.171.68.124/32 -i -p tcp -m tcp --dport 2222 -j REJECT --reject-with icmp-port-unreachable sudo iptables -A DOCKER-USER ! -s 54.171.68.124/32 -i -p tcp -m tcp --dport 8088 -j REJECT --reject-with icmp-port-unreachable -sudo iptables -A DOCKER-USER -p tcp -m tcp --dport 8110 -j ACCEPT ``` +(Replace with the name of the interface you use to connect to the internet eg. eth0) Don't forget to [save](https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands#saving-rules) the rules! From d6c0e5bba06bc99c1a940e6a2ad11050bd4b34d7 Mon Sep 17 00:00:00 2001 From: Rene Pedersen Date: Sat, 19 May 2018 14:24:14 +0400 Subject: [PATCH 2/2] Fix formatting --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a09ab6a..edd70c7 100644 --- a/README.md +++ b/README.md @@ -38,7 +38,7 @@ sudo iptables -A INPUT ! -s 54.171.68.124/32 -p tcp -m tcp --dport 2376 -m connt sudo iptables -A DOCKER-USER ! -s 54.171.68.124/32 -i -p tcp -m tcp --dport 2222 -j REJECT --reject-with icmp-port-unreachable sudo iptables -A DOCKER-USER ! -s 54.171.68.124/32 -i -p tcp -m tcp --dport 8088 -j REJECT --reject-with icmp-port-unreachable ``` -(Replace with the name of the interface you use to connect to the internet eg. eth0) +(Replace `` with the name of the interface you use to connect to the internet eg. eth0) Don't forget to [save](https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands#saving-rules) the rules!