Firewall usage

Create a firewall approval for your institute.[wiki_firewall_1]

Freiburg

Create a security group freiburg, allowing only ingress to your service, under port 8080, from the University Freiburg, and assign it to your VM myVM.

openstack security group create freiburg
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '132.230.0.0/16' \
    freiburg
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '192.52.50.0/24' \
    freiburg
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '10.0.0.0/8' \
    freiburg
openstack server add security group myVM freiburg

Custom workplace outside of the UFR

Create a security group myWorkplace, allowing only ingress to your service, under port 8080, from your current workplace, and assign it to your VM myVM.

1. Login into myVM via SSH.
2. Determine your login IP-Address myIP by one of these commands:
   
   • cat /var/log/secure | grep Accepted
   • journalctl -t sshd --since -5m | grep Accepted
3. Allow ingress from your current workplace.

openstack security group create myWorkplace
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip myIP \
    myWorkplace
openstack server add security group myVM myWorkplace

⇈ Hoch