Previous Topic: Enable Name Resolution

Next Topic: Update the Inactive IP Tables

Update the Active IP Tables

Access controls on the ProtectServer Orange External is performed using IP tables.

In the following example, the desired access control configuration is to deny access to all but one IP address, that of your directory host. In this example, the directory host's IP address will be 10.1.3.10.

iptables -F INPUT
iptables -A INPUT -s 10.1.3.10 -j ACCEPT
iptables -A INPUT -j DROP
/etc/init.d/iptables save active

Once the last command is entered, the HSM should respond with the following message.

Saving iptables ruleset: save "active" with counters
Please refer to the ProtectServer Orange External installation guide for further details on the commands used.


Copyright © 2009 CA. All rights reserved. Email CA about this topic