Linux: Firewalls and SELinux

2h 22mIntermediate2017-04-21

Authors

Sean Colins

Management Consultant, Author, Trainer, and Entrepreneur

Course details

This course takes you through the basics of firewalls on Linux. Sean Colins shows you how to configure Firewalld for local protection, work with SELinux, and troubleshoot firewalls. He also covers iptables, default policies, port blocking, and port forwarding. Learn how to install GUI controls and utilities, manage zones and services, enable servers, set access controls, change ports, move files, and more.

Learning objectives
Working with iptables
Installing Firewalld
Exploring zones and services
Allowing the Apache web server
Allowing FTP and SFTP servers
Installing SELinux utils
Setting discretionary or mandatory access
Installing SELinux man pages
Working with Booleans
Changing context labels
Running sepolicy
Finding SELinux logs
Making domains permissive
Disabling and reenabling SELinux

Skills covered

LinuxNetwork AdministrationNetwork and System AdministrationOpen Source

Concepts

0. Introduction

01 - Welcome to firewalls and SELinux
02 - Prerequisites

1. Firewall Basics on Linux

03 - Iptables and Firewalld
04 - Installing Firewalld
05 - Installing the Firewalld GUI controls
06 - Installing GUI controls with no GUI
07 - Understand Firewalld zones
08 - Understand Firewalld services
09 - Zones explored

2. Configuring Firewalld for Local Protection

10 - Firewall-cmd configuration preparation
11 - Allowing the Apache web server
12 - Allowing any mail server
13 - Allowing an XMPP server
14 - Allowing an SMB server
15 - Allowing an NFS server
16 - Allowing an LDAP server
17 - Allowing a PostgreSQL server
18 - Allowing FTP and SFTP servers
19 - VM Port Forwarding
20 - ShieldsUP panic mode

3. SELinux Fundamentals

21 - Installing SELinux utils
22 - Discretionary vs. mandatory access
23 - Understanding contexts
24 - Installing SELinux man pages
25 - Understanding Booleans

4. Working with SELinux

26 - Enabling SELinux and modes
27 - Graphical management tools
28 - Changing context labels
29 - Changing ports on services
30 - Copying files
31 - Moving files

5. SELinux Troubleshooting

32 - Running sepolicy
33 - Finding SELinux logs
34 - Making domains permissive
35 - Disabling and reenabling SELinux

Conclusion

36 - Next steps