RH302 Practice Exam Questions | RHCE

Do the following steps as:

1.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp –d 192.168.0.254 --dport 20 –j DROP

2.iptables –t filter –A INPUT –s ! 192.168.0.0/24 –p tcp –d 192.168.0.254 --dport 21 –j DROP

iptables is the build-in firewall tools, used to filter the packets and for nat. By identifying Source Address, Destination Address, type of protocol, source and destination port we can filter the packets.

-sSource Address

-dDestination Address

-pLayer 3 Protocol

-dDestination Address

--sportSource Prot

--dportDestination Port

-iIncoming Interface

-oOutgoing Interface

-tTable either filter or nat or mangle

-AChain can be either INPUT, OUTPUT, FORWARD, PREROUTING, POSTROUTIN

G.  

Do the following steps as:

1.vi /etc/vsftpd/vsftpd.conf

anon_upload_enable=yes

chown_uploads=yes

chown_username=username

2.service vsftpd start| restart

3.directory owner should be ftp user: chown ftp directory path allowedto upload files.

4.Write permission should be set to owner user.

By default anonymous user can only download files from the ftp. Should write anon_upload_enable=yes to enable anonymous upload files. Default Directory for anonymous is /var/ftp.

Do the following steps as:

1.vi /etc/exports

/data*.example.com(rw,sync)

2.service nfs start

3.service portmap restart

4.chkconfig nfs on

5.chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses. NFS is RPC service so, portmapper service should restart after starting the nfs service.