Red Hat LINUX 7.1 - ISERIES Manual page 39

Section 3.13:Firewall Configuration
Allow Incoming
Enabling these options allow the specified services to pass through the firewall. Note, during a
workstation-class installation, the majority of these services are not installed on the system.
DHCP
If you allow incoming DHCP queries and replies, you allow any network interface that
uses DHCP to determine its IP address. DHCP is normally enabled. If DHCP is not
enabled, your computer can no longer get an IP address.
SSH
Secure SHell (SSH) is a suite of tools for logging into and executing commands on a
remote machine. If you plan to use SSH tools to access your machine through a firewall,
enable this option. You need to have the openssh-server package installed in order
to access your machine remotely, using SSH tools.
Telnet
Telnet is a protocol for logging into remote machines. Telnet communications are un-
encrypted, and provide no security from network snooping. Allowing incoming Telnet
access is not recommended. If you do want to allow inbound Telnet access, you will need
to install the telnet-server package.
WWW (HTTP)
The HTTP protocol is used by Apache (and by other Web servers) to serve Web pages. If
you plan on making your Web server publicly available, enable this option. This option
is not required for viewing pages locally or for developing Web pages. You will need to
install the apache package if you want to serve Web pages.
Mail (SMTP)
If you want to allow incoming mail delivery through your firewall, so that remote hosts
can connect directly to your machine to deliver mail, enable this option. You do not need
to enable this if you collect your mail from your ISP's server using POP3 or IMAP, or if
you use a tool such as fetchmail. Note that an improperly configured SMTP server can
allow remote machines to use your server to send spam.
FTP
The FTP protocol is used to transfer files between machines on a network. If you plan
on making your FTP server publicly available, enable this option. You need to install the
wu-ftpd (and possibly the anonftp) package for this option to be useful.
Other ports
39