Let them stay together.
In the last YEARS, I have seen quite often that users, when
installing a product such as PXC, instead of spending five
minutes to understand what to do just run
iptables -F
and save.
In short, they remove any rules for their firewall.
With this post, I want to show you how easy it can be to do the
right thing instead of putting your server at risk. I’ll show you
how a slightly more complex setup like PXC (compared to MySQL),
can be easily achieved without risky shortcuts.
iptables is the utility used to manage the chains of rules used
by the Linux kernel firewall, which is your basic security
tool.
Linux comes with a wonderful firewall built into the kernel. As
an administrator, you can configure this firewall with interfaces
like ipchains — which we are not going to cover — and
iptables, which we shall talk about.
iptables is …
[Read more]