topic adding local port inside HF to accept data in Deployment Architecture

adding local port inside HF to accept data

KhalidAlharthi — Thu, 05 Sep 2024 06:44:14 GMT

Hello Members,

I have configured splunk HF to recieve data input as port 1531/udp

i used command firewall-cmd --permanent --zone=public --add-port=1531/udp

but when i used firewall-cmd --list-all dosen't appear on the opening ports is this consider a problem and also checked netstat and the port is listening on 0.0.0.0 (all)

thanks

Re: adding local port inside HF to accept data

kiran_panchavat — Fri, 06 Sep 2024 14:53:08 GMT

@KhalidAlharthi

1. Reload Firewall Rules : sudo firewall-cmd --reload

2. Verify the Rule is Active: sudo firewall-cmd --list-all

3. Consider SELinux: If you're using SELinux (Security-Enhanced Linux), it could also be blocking access. You can temporarily disable it to test if that's the issue :
sudo setenforce 0

Re: adding local port inside HF to accept data

PickleRick — Fri, 06 Sep 2024 20:16:40 GMT

SELinux has nothing to do with firewalld in the sense that adding a rule to firewalld should work regardless of SELinux status - the rule should show. True, SELinux coud prevent the process from processing connection but that's completely independent from firewalld.