Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

PowerProtect Data Manager Appliance 5.15.0.0 Security Configuration Guide for DM5500

PDF

Modify firewall rules

The PowerProtect Data Manager Appliance system configures firewall rules to block inbound and outbound communications on ports that are not required by PowerProtect Data Manager Appliance components for communication.

About this task

There are three ways to modify the firewall rules:

  • For permanent changes, you can add entries to the list of custom ports.
  • For temporary changes, you can use the iptables command, which is part of the Linux operating system. Users should be familiar with the operation and syntax for iptables, including order of precedence, before using this method. Temporary changes do not persist through firewall restarts.
  • You can also use the PowerProtect Data Manager Appliance REST API to open outbound ports. The PowerProtect Data Manager Appliance Public REST API documentation provides instructions for this method.
NOTE:It is recommended that you do not modify existing firewall rules, because modification can impact successful operations.

Steps

  1. Connect to the PowerProtect Data Manager Appliance console and change to the root user.

For permanent changes:

  1. Add port numbers on separate lines to /etc/sysconfig/scripts/custom-ports.

    For example: 

    139
445
6443
8080

    Save and close the file.

  2. Stop the firewall service:
    service firewalld stop
  3. Start the firewall service:
    service firewalld start

For temporary changes:

  1. Open an outbound port:

    /usr/sbin/iptables -I OUTPUT -p tcp --dport <num> -j ACCEPT

    where <num> is the new outbound port.

    This example inserts the new rule at the head of the rule chain and opens the specified TCP port from PowerProtect Data Manager Appliance to any destination.
  2. Open an inbound port:

    /usr/sbin/iptables -I INPUT -p tcp --dport <num> -j ACCEPT

    where <num> is the new outbound port.

    This example inserts the new rule at the head of the rule chain and opens the specified TCP port to PowerProtect Data Manager Appliance from any destination.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\