Users Guide

Ports and Application To Exclude from Firewall |
1034 OMNM 6.5.2 User Guide
Ports and Application To Exclude from Firewall
Exclude java.exe , tcp port 21 and udp port 69 from firewall interference to let the application
function. The java process to exclude from firewall blocking is
<Installdir>\oware3rd\
jdk[version number]\jre\bin\java.exe
.
If you have distributed the database functions then you must allow the database process to
communicate with your machine through your firewall as well. The embedded database process is
mysqld-max-nt.exe (in Windows, the path is
<installdir>oware3rd\mysql\[version number]\bin\mysql-max-nt.exe.
Consult your DBA for Oracle processes, if applicable.
Example Linux firewall configuration (from iptables-save > my-config-file ):
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 69 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 161 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 162 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 162 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 514 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 1099 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 1100 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 1101 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8089 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 5900 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 5900 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 6343 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8089 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8082 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8083 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8119 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 8162 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8162 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 9996 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 9996 -j ACCEPT
Add any new lines to the firewall file /etc/sysconfig/iptables , and restart the firewall
service.