--- doc/build/centos7_install.frag 2021/03/09 13:51:25 1.4 +++ doc/build/centos7_install.frag 2021/03/13 20:43:28 1.5 @@ -89,9 +89,21 @@ Finish installing your server, reboot it

Firewall Configuration

-LON-CAPA uses the traditional iptables package instead of the recent Firewalld, included for the -first time with CentOS 7. Accordingly, you should install iptables-services, disable firewalld, -and enable iptables. +Starting with LON-CAPA 2.11.3 you have the option of using either firewalld or iptables to +manage the Firewall on your CentOS 7 server/VM, as both are compatible with LON-CAPA's +port management.

+

Enable access to standard web server ports (i.e., http and https) as follows, if +using firewalld::

+
+systemctl enable firewalld
+systemctl start firewalld
+firewall-cmd --zone=public --permanent --add-service=http
+firewall-cmd --zone=public --permanent --add-service=https
+firewall-cmd --reload
+
+

If you prefer to use the traditional iptables package instead of the default firewalld, +you will need to install iptables-services, disable firewalld, enable iptables, and then +use the system-config-firewall-tui tool to configure the Firewall.

 yum install iptables-services
@@ -101,15 +113,12 @@ systemctl enable ip6tables
 systemctl stop firewalld
 systemctl start iptables
 systemctl start ip6tables
-yum install wget
-rpm --import http://install.loncapa.org/versions/centos/RPM-GPG-KEY-loncapa
-wget http://install.loncapa.org/versions/centos/7/system-config-firewall-tui-1.2.29-10.el7.noarch.rpm
-yum localinstall system-config-firewall-tui-1.2.29-10.el7.noarch.rpm
 

-The system-config-firewall-tui tool should be used to configure the Firewall. +Install the system-config-firewall-tui package and configure the Firewall.

+yum install system-config-firewall-tui
 system-config-firewall-tui
 
    @@ -137,15 +146,13 @@ yum update Reboot your system before continuing with the installation.

    -Retrieve the centos7_loncapa_yum file from the LON-CAPA install site: +Retrieve the centos7_loncapa_yum file from the LON-CAPA install site and install +using the following commands:

    +yum install wget
    +rpm --import http://install.loncapa.org/versions/centos/RPM-GPG-KEY-loncapa
     wget http://install.loncapa.org/versions/centos/7/centos7_loncapa_yum.conf
    -
    -

    -Install the centos7_loncapa_yum.conf -

    -
     mv /etc/yum.conf /etc/yum.conf.backup
     cp centos7_loncapa_yum.conf /etc/yum.conf
     yum update