Basic Oracle Cloud Firewall Guide

Oracle Cloud Firewall How To.

(Dumped here from the Pastebin in case it gets removed)

Inside the WebAdmin App:

• Hamburger Menu > Pinned Links > Compute / Instances

• Click on your instance name

• Under Primary VINC

• Click on the Subnet: link

• Under Security Lists

• Click on Default Security List for subnet name

• Under Ingress Rules

• Click Add Ingress Rules

For each Rule:

• Source CIDR: 0.0.0.0/0

• IP Protocol: TCP

• Destination Port Range: 6667

• Click "Add Ingress Rules"

• and click Add Ingress Rules again...

• Fill in the fields as before but for the following destination port ranges each time: 6697, 6900

• Repeat the above but with ::/0 for Source CIDR for IPv6

It should look similar to this when done: https://i.imgur.com/SzPFQha.png

• You may need to click under "Resources" in the sidebar and "Egress Rules"

• and add two Egress Rules.

• One for Destination CIDR: 0.0.0.0/0

• And one for Destination CIDR: ::/0

It should look like this when done: https://i.imgur.com/oFjS0E1.png

Further Firewall opening for Ubuntu Servers:

• Inside the SSH Prompt:

• IP Tables Firewall unlocking (you may need to do this more than once, like after a server reboot)

• sudo nano /etc/iptables/rules.v4

• Remove these two lines

• -A INPUT -j REJECT --reject-with icmp-host-prohibited

• -A FORWARD -j REJECT --reject-with icmp-host-prohibited

• Save.

Then:

• sudo iptables -L INPUT

• If this still shows:

REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Do this:

• sudo iptables -D INPUT -j REJECT --reject-with icmp-host-prohibited

If you installed the Oracle distro:

• sudo firewall-cmd --zone=public --permanent --add-port=6667/tcp

• sudo firewall-cmd --zone=public --permanent --add-port=6697/tcp

• sudo firewall-cmd --zone=public --permanent --add-port=6900/tcp

• sudo firewall-cmd --reload

That SHOULD do it at least for IPv4.