Unclear on instructions given on troubleshooting instructions.

[James Griffin]

Hi,

I am having some issues with the clarity of the instructions given at the following troubleshooting page:

https://confluence.atlassian.com/jirakb/running-jira-with-firewall-on-linux-741933610.html?_ga=2.194345774.2076281361.1529770637-19045465.1529770637

I would like to preface this with acknowledging that I am new to this and the Linux world which is contributing to my difficulty in fully understanding the instructions.

I have installed Jira on CentOS 7 Minimal which I believe uses firewalld as standard.

Firstly, the guide starts with iptables commands and then has additional instructions for CentOS 7 and firewalld, and it is unclear to me if I run the iptables commands AND the firewalld commands, or if they are mutually exclusive.

The guide says

 If you are running Centos 7, the management of firewall has changed. To disable the firewall follow the steps below:

Does this mean I should not be using firewalld? as the first steps mentioned are to disable it.

However It then mentions about keeping firewalld active.

 If you prefer to keep Firewalld active, there are a few more steps to be taken:

However it makes no mention of restarting the firewall, adding to my confusion.

Additionally, the following line does not execute

firewall-cmd --permanent -port=8080/tcp

I assume it should be

firewall-cmd --permanent --add-port=8080/tcp

Some additional notes about the following article:

https://confluence.atlassian.com/jirakb/how-to-fix-gadget-titles-showing-as-__msg_gadget-813697086.html

The following commands are mentioned, the second two don't run.

iptables -t nat -I OUTPUT -p tcp -o lo --dport 80 -j REDIRECT --to-ports 8080

 -A OUTPUT -o lo -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443 

-A OUTPUT -d XX.XXX.XXX.XX/32 -o lo -p tcp -m tcp --dport 80 -j DNAT --to-destination XX.XXX.XXX.XX:8080
-A OUTPUT -d XX.XXX.XXX.XX/32 -o lo -p tcp -m tcp --dport 443 -j DNAT --to-destination XX.XXX.XXX.XX:8443

I assume it should be

iptables -t nat -I OUTPUT -p tcp -o lo --dport 80 -j REDIRECT --to-ports 8080

iptables -t nat -A OUTPUT -o lo -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443 

iptables -t nat -A OUTPUT -d XX.XXX.XXX.XX/32 -o lo -p tcp -m tcp --dport 80 -j DNAT --to-destination XX.XXX.XXX.XX:8080
iptables -t nat -A OUTPUT -d XX.XXX.XXX.XX/32 -o lo -p tcp -m tcp --dport 443 -j DNAT --to-destination XX.XXX.XXX.XX:8443

It may seem trivial to a seasoned linux guy, but when starting out it can be a little bit confusing.