Zenet's questions

This doesn't work for me:

# iptables -A INPUT -p tcp --dports 110,143,993,995 -j ACCEPT

iptables v1.4.7: unknown option `--dports'
Try `iptables -h' or 'iptables --help' for more information.

However in the man page, there is an option --dports... any ideas?

I want an unprivileged user to be able to restart tomcat on my server. So I edited /etc/sudoers as follows

username  ALL=/etc/init.d/tomcat6

However, when the user runs /etc/init.d/tomcat6 restart he gets this error:

Starting tomcat server...
 touch: cannot touch `/var/tomcat6/logs/catalina.out': Permission denied
/var/tomcat6/bin/catalina.sh: line 314: /var/tomcat6/logs/catalina.out: Permission denied

How do I allow this user to run tomcat without giving him write permission on the log file /var/tomcat6/logs/catalina.out ?

[root@jsp1 ~]# ll /var/tomcat6/logs/catalina.out
-rw-r--r-- 1 root root 272669097 Feb 27 21:50 /var/tomcat6/logs/catalina.out

I need to configure my machine as to allow HTTP traffic to/from serverfault.com only. All other websites, services ports are not accessible. I came up with these iptables rules:

#drop everything
iptables -P INPUT DROP
iptables -P OUTPUT DROP

#Now, allow connection to website serverfault.com on port 80
iptables -A OUTPUT -p tcp -d serverfault.com --dport 80 -j ACCEPT
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

#allow loopback
iptables -I INPUT 1 -i lo -j ACCEPT

It doesn't work quite well:

• After I drop everything, and move on to rule 3:

  iptables -A OUTPUT -p tcp -d serverfault.com --dport 80 -j ACCEPT

I get this error:

iptables v1.4.4: host/network `serverfault.com' not found
Try `iptables -h' or 'iptables --help' for more information.

Do you think it is related to DNS? Should I allow it as well? Or should I just put IP addresses in the rules? Do you think what I'm trying to do could be achieved with simpler rules? How?

I would appreciate any help or hints on this. Thanks a lot!

I have a CentOS running Apache Tomcat, I would like to replace mod_proxy by mod_jk, I can see with httpd -l that these modules are loaded:

 mod_proxy_connect.c
 mod_proxy_ftp.c
 mod_proxy_http.c
 mod_proxy_scgi.c
 mod_proxy_ajp.c
 mod_proxy_balancer.c

How do I disable mod_proxy from Apache Tomcat?

Thanks!

How do I install glibc on a CentOS server?

I did:

yum install glibc-devel

But it tells me that the version glibc 2.15 is installed.

However i need to have the version 2.17.