Syncing And Starting The Cobbler Service - Red Hat NETWORK SATELLITE 5.3.0 Reference Manual

Chapter 11. Cobbler
11.1.5.2. IPTables Configuration
Once you have configured SELinux, you must then configure IPTables to allow incoming and outgoing
network traffic on the Cobbler server.
If you have an existing firewall ruleset using IPTables, you need to add the following rules to open
the requisite Cobbler-related ports. The following lists each of the requisite rules with their associated
service.
• For TFTP:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 69 -j
ACCEPT
/sbin/iptables -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j
ACCEPT
• For HTTPD:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j
ACCEPT
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j
ACCEPT
• For Cobbler:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p udp --dport 25150
-j ACCEPT
• For Koan:
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 25151
-j ACCEPT
Once those firewall rules are entered, be sure to save the firewall configuration:
/sbin/iptables-save

11.1.6. Syncing and Starting the Cobbler Service

Once all the prerequisites specified in cobbler check are met, you can now start the Cobbler
service.
First, ensure that the configuration files are all synchronized by running the following command:
198