The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

► To allow Web traffic through, you can modify the file /etc/sysconfig/iptables. First make
a backup copy, then add two rules (in bold) to allow these ports then save your changes:
# cd /etc/sysconfig
# cp iptables iptables.orig
# vi iptables
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
► Restart the firewall to pick up the new rules:
# service iptables restart
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
► Go back to your browser and click refresh again. You should not get an error this time.
You should now have a firewall that allows Web traffic.
11.1.4 Configuring SSL for Apache
Use the Secure Sockets Layer (SSL) to encrypt data between the client (browser) and the
server. This is done by specifying an https prefix in the URL which uses port 443 rather than
using the conventional http prefix which uses port 80. Perform the following steps:
► To use SSL, the mod_ssl package is requied. You can show that SSL communications do
not work by changing http to https in your browser:
https://9.60.18.224/
You should see some type of communications error.
► Install the mod_ssl RPM with the yum -y install command:
# yum -y install mod_ssl
...
Installed:
mod_ssl.s390x 1:2.2.15-5.el6
Complete!
► Verify that the RPM was added:
# rpm -qa | grep mod_ssl
mod_ssl-2.2.15-5.el6.s390x
► Restart the Web server:
# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: [ OK ]
172 The Virtualization Cookbook for RHEL 6