CentOS6 - no firewall rules about virtualmin-install

[jcameron]

So is the issue that CentOS 6 sets up firewall rules that the Webmin installer doesn't open up port 10000 on? That should happen automatically .... are you using FirewallD, or just plain IPtables?

[iliajie]

I installed CentOS 6. Ran install script (pro version). Then I couldn't access my virtual machine. After stopping iptables the problem was solved.

[iliajie]

I have installed it nearly hundreds of times. It never happened on other CentOS versions. Never happened on Debian and Ubuntu.

[jcameron]

Did you happen to capture the firewall rules that were active before stopping IPtables?

[iliajie]

[root@debug-centos6 authentic-theme]# iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N f2b-dovecot
-N f2b-postfix
-N f2b-postfix-sasl
-N f2b-proftpd
-N f2b-ssh-ddos
-N f2b-sshd
-N f2b-webmin-auth
-A INPUT -s 192.168.122.0/24 -p tcp -m tcp --dport 10000 
-A INPUT -p tcp -m multiport --dports 22,115 -j f2b-ssh-ddos 
-A INPUT -p tcp -m multiport --dports 25,465,587,220,993,110,995 -j f2b-postfix-sasl 
-A INPUT -p tcp -m multiport --dports 110,995,143,993,587,465,4190 -j f2b-dovecot 
-A INPUT -p tcp -m multiport --dports 25,465,587 -j f2b-postfix 
-A INPUT -p tcp -m multiport --dports 21,20,990,989 -j f2b-proftpd 
-A INPUT -p tcp -m multiport --dports 10000 -j f2b-webmin-auth 
-A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd 
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -p icmp -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT 
-A INPUT -j REJECT --reject-with icmp-host-prohibited 
-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT 
-A FORWARD -j REJECT --reject-with icmp-host-prohibited 
-A f2b-dovecot -j RETURN 
-A f2b-postfix -j RETURN 
-A f2b-postfix-sasl -j RETURN 
-A f2b-proftpd -j RETURN 
-A f2b-ssh-ddos -j RETURN 
-A f2b-sshd -j RETURN 
-A f2b-webmin-auth -j RETURN 

[iliajie]

To compare:

CentOS 7:

[root@debug-centos ~]# iptables -S |grep 10000
-A INPUT_direct -p tcp -m multiport --dports 10000 -m set --match-set fail2ban-webmin-auth src -j REJECT --reject-with icmp-port-unreachable
-A IN_public_allow -p tcp -m tcp --dport 10000:10100 -m conntrack --ctstate NEW -j ACCEPT
-A IN_public_allow -p tcp -m tcp --dport 10000 -m conntrack --ctstate NEW -j ACCEPT

CentOS 6:

[root@debug-centos6 ~]# iptables -S |grep 10000
-A INPUT -s 192.168.122.0/24 -p tcp -m tcp --dport 10000 
-A INPUT -p tcp -m multiport --dports 10000 -j f2b-webmin-auth 
-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT 

[swelljoe]

CentOS 6 is EOL.