On 4/13/20 2:28 PM, bruce wrote:
For the firewall, I'm trying to find example/samples of what the
firewall cmds/services/ports should be to lock the system down. I've
seen different sites that say different things, so I figured I'd ask
here as well.
For a normal web server, you only have port 80 and 443. I usually roll
my own firewall scripts with fwbuilder because I have complicated setups
with vlans and various applications. But you should be good with
firewalld. Make sure it's turned on and there are standard commands for
opening specific ports. You can look it up or maybe someone else more
familiar with it could explain.
At the same time, given that I'm new to selinux, if you have
pointers/thoughts on how to set this up, I'm ready to "test"!! I don't
want to run a test server with selinux turned off.
Unless you have files in non-standard places or databases, etc, selinux
should not bother you.