Método-1–> editar  /etc/sysconfig/iptables, y añadir las líneas en negrita.

$ nano /etc/sysconfig/iptables

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state –state NEW -m tcp -p tcp –dport 22 -j ACCEPT

# Habilitar puertos para OpenERP.
-A INPUT -m state –state NEW -m tcp -p tcp –dport 8069 -j ACCEPT
-A INPUT -m state –state NEW -m tcp -p tcp –dport 8070 -j ACCEPT
#—————————————————————–

-A INPUT -j REJECT –reject-with icmp-host-prohibited
-A FORWARD -j REJECT –reject-with icmp-host-prohibited
COMMIT

————————————————————————————————————————

Reiniciamos iptables:

$ service iptables restart

Método-2–>  Ejecutar lo que sigue:

$ iptables -A INPUT -m state –state NEW -m tcp -p tcp –dport 8069 -j ACCEPT
$ iptables -A INPUT -m state –state NEW -m tcp -p tcp –dport 8070 -j ACCEPT

$ service iptables save

$ service iptables restart

Método-3–>  Con Shorewall:

Instalamos shorewall:

yum -y install shorewall

Editamos  /etc/shorewall/rules:

$ nano /etc/shorewall/rules

Añadimos:

#ACTION SOURCE DEST PROTO DEST SOURCE
# PORT PORT(S)1
ACCEPT all fw tcp 8069,8070
#LAST LINE — ADD YOUR ENTRIES BEFORE THIS ONE — DO NOT REMOVE

Reiniciamos shorewall:

$ service shorewall restart

2391