topic Re: installation start up in Installation

installation start up

taelee94 — Wed, 01 Dec 2010 09:09:42 GMT

Hi,

I'm new to splunk and Linux. I installed it to a CentOS 5.4 server and tried to get to http://splunk server:8000 but it would't come up unless iptable is stopped.

So I added an entry into iptables as below:

iptables -A INPUT -p tcp --dport 8000 -j ACCEPT

And after that I restarted iptables services but it still won't work.

Any suggestions or idea would be greatly appreciated.

Thanks,

Re: installation start up

dwaddle — Wed, 01 Dec 2010 10:18:00 GMT

When you restarted iptables, you probably blew away the rule you added. Running the iptables command at the shell prompt only updates the in-memory filter table. You should add your rule in the proper place in /etc/sysconfig/iptables and then restart the iptables services. After the restart, verify your rule is there using iptables -nL.

Re: installation start up

taelee94 — Wed, 01 Dec 2010 14:50:44 GMT

Thanks and it worked!! However, I noticed something very strange. Whenever I start lokkit, any rules I added to /etc/sysconfig/iptables get deleted. I don't understand why...

Re: installation start up

dwaddle — Wed, 01 Dec 2010 23:32:41 GMT

I've never used lokkit - but it sounds like it may not read the /etc/sysconfig/iptables file itself and/or it flushes the ruleset. You might use 'system-config-firewall' instead. (Me personally, I always just edit the file in /etc/sysconfig)

Re: installation start up

dwaddle — Wed, 01 Dec 2010 23:33:07 GMT

Also, please click the checkbox to the left of my answer to accept it as "correct" - Thanks!