Deployment Guide

Example 2: Allow access from address 199.95.207.0/24 network only:
-A INPUT -m state --state NEW -m tcp -p tcp -s 199.95.207.0/24 --dport 80 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp -s 199.95.207.0/24 --dport 443 -j ACCEPT
If any changes were made to iptables configuration rules, the added/modified rules need to be reloaded:
# service iptables reload
SSH connectivity
Disable SSH root logins
Super user (root) SSH logins are enabled by default in CentOS and RHEL. This is not a recommended
configuration. If root permissions are needed, a user should first log in as an ordinary user and then switch
user to root or better yet, use sudo to execute a root level command, which provide more granular auditing
capabilities.
Open the file /etc/ssh/sshd_config in an editor. Locate the following line:
#PermitRootLogin yes
Change it to following:
PermitRootLogin no
7signal Solutions Inc., 6155 Rockside Road, Suite 110, Independence, Ohio 44131, USA,
216-777-2900, [e-mail], www.7signal.com