Book Image

CentOS Quick Start Guide

By : Shiwang Kalkhanda
Book Image

CentOS Quick Start Guide

By: Shiwang Kalkhanda

Overview of this book

Linux kernel development has been the worlds largest collaborative project to date. With this practical guide, you will learn Linux through one of its most popular and stable distributions. This book will introduce you to essential Linux skills using CentOS 7. It describes how a Linux system is organized, and will introduce you to key command-line concepts you can practice on your own. It will guide you in performing basic system administration tasks and day-to-day operations in a Linux environment. You will learn core system administration skills for managing a system running CentOS 7 or a similar operating system, such as RHEL 7, Scientific Linux, and Oracle Linux. You will be able to perform installation, establish network connectivity and user and process management, modify file permissions, manage text files using the command line, and implement basic security administration after covering this book. By the end of this book, you will have a solid understanding of working with Linux using the command line.
Table of Contents (11 chapters)

Understanding firewall concepts in CentOS 7

Operating system security generally follows a defense in depth model, where security is implemented at different layers in the system. Starting from policies and procedure, physical controls, network perimeter security, host security, application security, and so on, several elements are secured to harden the security of a system. In this, a firewall helps in securing the system, as well as applications, by limiting access to the system. Firewall rules filter packets based on specific criteria, such as IP addresses, port and protocol, and so on.

In Linux, firewall rules are managed by the network filtering subsystem available in the kernel and known as netfilter. The netfilter framework enables the system to inspect, modify, drop, or reject any incoming, outgoing, or forwarded network packet programmatically.

The iptables command is...