Virtual Appliance Firewall

General
, , ,
1

Hi
In an attempt to install the iptables-persistent package for the Checkmk virtual appliance I received this error message:

!!! WARNING !!!
You are trying to use apt on a Check_MK Appliance. Installing or updating
packages manually will lead to serious trouble.

Your device will not be supported anymore if you change the installed packages.
!!! WARNING !!!
Do you want to continue? [y/N]:

To configure firewall rules effectively on the appliance this package is extremely important.

My questions are:

  1. Since iptables itself comes preinstalled on the appliance, will I really have serious problems installing this package?
  2. Can we have this package built in with the appliance to avoid the above possible issues, and so we will not need to install it manually at each firmware upgrade?

Best Regards.

2

Hallo,
which problem should be solved by installing iptables?
Ralf

3

Hello,

Iptables is already installed as a firewall to create rules that allow and block traffic to my checkmk server.

Iptables-persistent will allow the firewall rules to “persist” during system reboots and not be erased.

Thanks.

4

Hallo,
why do yo need a firewall.
A cmk system should never be reachable from outside without protection by firewalls and/ or VPN.
Ralf

5

I see what you mean. The ultimate reason is that it is our company policy to have a layered security, including installing a local firewall.

6

Ok,
but if an internal system is under attack you ve other problems :wink:
Ralf

1 Like
7

Hello,

you could just use
iptables-save > /etc/rulesv4.conf

and then add the following to the startup of the system.
iptables-restore < /etc/rulesv4.conf

BR
Flolo

1 Like
8

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.