Scenario: Set Up a Default Configuration Webserver and Limit Access

Step 1: Install Apache (httpd)

yum -y install httpd
service httpd start
chkconfig httpd on


Step 2a: Add a Basic Test HTML File, Method 1

vim /var/www/html/index.html


Add the following to the text file, and then save and close the text file:


This is a test HTML file!


Step 2b: Add a Basic Test HTML File, Method 2

echo 'This is a test HTML file!' > /var/www/html/index.html


Step 3: Limit Access for Testing


Allow SSH from a specific network, in this case <reference_page_text>10.100.100.0/24:

iptables -A INPUT -i eth0 -p tcp -s 10.100.100.0/24 --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT


Allow HTTP from a specific network, in this case <reference_page_text>10.100.100.0/24:

iptables -A INPUT -i eth0 -p tcp -s 10.100.100.0/24 --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -o eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT


Allow ping via ICMP:

iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT


Set default chain policies:

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP


Save the configuration:

service iptables save


Start iptables:

service iptables start

  • 1 Users Found This Useful
Was this answer helpful?

Related Articles

Tutorial: An Introduction to Managing a Linux Server with systemd

What is systemd? Systemd is the System Management Daemon, which provides a standard for...

How to Install and Connect to PostgreSQL on Ubuntu 12.04

Step 1: Install PostgreSQL First, you’ll follow a simple best practice: ensuring the list...

Update and Patch OpenSSL on CentOS for the CCS Injection Vulnerability

What is OpenSSL? OpenSSL is a common cryptographic library which provides encryption,...

Error: /usr/sbin/ifconfig: No such file or directory [SOLVED]

There are several commonly used, but deprecated, Linux networking commands, including: arp,...

How to Install Pip on Ubuntu 14.04 LTS

Pip is a tool for installing and managing Python packages. Python is a programming language. It...

Powered by WHMCompleteSolution