Article

TID 7001907 gives details about a potential security vulnerability with Apache, or more specifically ApacheAdmin, on NetWare 6.5 after you've installed an OES2 Linux server into the same tree.

However there seems to (currently) be some ambiguity about the actual cause and suggested fix.

Here's one way of securing access to port 2200 on your NetWare server using FILTCFG.

1. edit sys:/etc/builtins.cfg and add the following line (perhaps before IPX services are defined)

PROTOCOL-SERVICE IP, NWWebMgr, pid=TCP port=2200 srcport=<All>, NetWare Web Manager

2. load INETCFG and navigate to Protocols | TCP/IP
3. change Filter Support to Enabled
4. load FILTCFG and navigate to Configure TCP/IP Filters | Define TCP/IP filters | Packet Forwarding Filters
5. change Status to Enabled
6. press [Ins] twice on Filters to add the following filter

Packet Type: NWWebMgr

7. press [Esc] and select Yes when prompted to Save Filter?
8. press [Ins] twice on Exceptions to add the following exception

Packet Type: NWWebMgr
Src Addr Type: Network
Src IP Address: network/netmask

9. press [Esc] and select Yes when prompted to Save Filter?
10. press [Esc] four times and select Yes when prompted to Exit FILTCFG?
11. RESTART SERVER (unfortunately - to re-read builtins.cfg)