Hool
07-07-2012, 11:14 PM
Installation Guide: Running EQEmulator on cEntOS 6.2
This guide well tell you, step by step, how to install cEntOS 6.2 and get up and running with the latest EQEmulator. A few references are made to previous guides where it makes sense.
I enjoyed writing and testing the guide, and hope it may help other cEntOS fans out there.
Although it is possible to get everything running on 64 bit, the returns are diminishing, and as of today, there is no compelling reason to go the 64 bit route. So, for all intents and purposes, this guide is for i386 (32 bit).
Requirements
A server, desktop, or laptop with the following specifications and features:
Intel Pentium 4 or better CPU (or AMD equivalent)
Between 512MB and 4GB RAM
VGA (nothing special)
Ethernet adapter connected to the internet
A keyboard and monitor (used only until webmin and SSH are running)
A drive to install the OS and Apps on with at least 10GB capacity (a USB drive works fine, albeit slower than a HDD)
A DVD Rom drive, or USB stick (other than target USB stick, if using) used only for installing the OS.
Another computer with a DVD burner, or a USB drive to put the install disk on.
Not required, but recommended, an uninterruptable power source (UPS) for your server, router, and cable modem (or whatever connects you to the internet)
Assumptions
This guide assumes you have a basic understanding of how to use google.com to find answers before asking here, basic understanding of vim (aka vi) editor (or the ability to google it and learn in 2 minutes), same with puTTy, and know how to forward ports on your router.
Step 1: Getting cEntOS 6.2
Download and burn cEntOS 6.2
http://mirror.centos.org/centos/6.2/isos/i386/CentOS-6.2-i386-bin-DVD1to2.torrent
(http://mirror.centos.org/centos/6.2/isos/i386/CentOS-6.2-i386-bin-DVD1to2.torrent)
You will only need to burn Disk 1
Step 2: Preparing the cEntOS 6.2 installation disk
Boot your server to the DVD or USB drive you burned the install disk to.
Choose "Basic Server" from the install list, and don't worry about trying to setup the firewall, etc at this time.
After the installation is complete, your server will reboot.
Step 3: Activate your Ethernet Adapter
Now you are ready to begin preparing your server. Login as root, and enable your eth0 adapter (your Ethernet adapter) by editing the ifcfg-eth0 file:
vi /etc/sysconfig/networking/devices/ifcfg-eth0
Find the line with "set ONBOOT=" and make sure it is set to
ONBOOT=yes
Now press CTRL+ALT+DEL and restart your server. When it comes back up, after you login, check that your eth0 is functioning with ifconfig:
ifconfig
If your results are similar to the ones below, you are ready for the next step. Otherwise, re-read step 3 and check for typos.
eth0 Link encap:Ethernet HWaddr F8:0F:41:3B:EC:84
inet addr:192.168.1.21 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::fa0f:41ff:fe3b:ec84/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:754653 errors:0 dropped:0 overruns:0 frame:0
TX packets:469526 errors:2 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1045464965 (997.0 MiB) TX bytes:41940512 (39.9 MiB)
Interrupt:27 Base address:0xa000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:199 errors:0 dropped:0 overruns:0 frame:0
TX packets:199 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:20240 (19.7 KiB) TX bytes:20240 (19.7 KiB)
Step 4: Losing your Head!
With a network connection, now it's time to get your server ready to become headless (without a keyboard, mouse, and monitor).
Install and Start SSH, so you can puTTy instead of your current keyboard and monitor.
Q: Why? You may ask? A: So you can cut/paste for the rest of this guide and save space and power.
Install SSH
yum -y install openssh-server openssh-clients
Now Start the SSH Service and check that the default port 22 is open
chkconfig sshd on
service sshd start
netstat -tulpn | grep :22
Now, we need to add some rules to the firewall, so that SSH access is only possible from your home network. For this guide, we assume 192.168.1.0/24.
Edit /etc/sysconfig/iptables (IPv4 firewall),
# vi /etc/sysconfig/iptables
Add the line
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
If you want to restict access to 192.168.1.0/24, edit it as follows:
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p tcp --dport 22 -j ACCEPT
If for some reason you also plan to use IPv6 on your server, also add this line:
-A RH-Firewall-1-INPUT -m tcp -p tcp --dport 22 -j ACCEPT
Save and close the file. Restart iptables:
# service iptables restart
Now, login as root to your server using puTTy (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html), put away that keyboard and monitor you dont need anymore, and enjoy the copy pasta for the rest of this guide!
Step 5: Installing the necessary software
Now it's time to install the software needed to compile and maintain EQEmulator.
yum install -y openssl mysql-server gcc mysql-devel svn perl-IO-stringy make gcc-c++ perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker perl-ExtUtils-Embed cpan httpd mod_ssl
cpan ExtUtils::Install
#note: enter "yes" at the prompt when installing ExtUtils
Step 6: Installing Webmin
wget http://www.webmin.com/download/rpm/webmin-current.rpm
rpm –import http://www.webmin.com/jcameron-key.asc
rpm -U webmin-1.590-1.noarch.rpm
#note: At the time this guide was written the current release of webmin was webmin-1.590-1.noarch.rpm. If get a file not found, it is likely because a new version was released, so check the file name.
Step 7: Getting and Compiling EQEmulator
Now, we will add a user called eqemu, then checkout the latest EQEmulator source code
adduser eqemu
cd /home/eqemu
svn checkout http://projecteqemu.googlecode.com/svn/trunk/ source
cd /home/eqemu/source/EQEmuServer
make clean
make
Be patient, the compile time can take anywhere from 5 minutes to an hour depending on your server performance.
Step 8: Moving the compiled binaries to their new home
cd /home/eqemu
mkdir server
cd /home/eqemu/server
cp –a /home/eqemu/source/EQEmuServer/utils/defaults/* .
cp /home/eqemu/source/EQEmuServer/utils/patch_* .
cp /home/eqemu/source/EQEmuServer/utils/cleanipc .
cp /home/eqemu/source/EQEmuServer/world/world .
cp /home/eqemu/source/EQEmuServer/zone/zone .
cp /home/eqemu/source/EQEmuServer/EMuShareMem/libEMuShareMem.so .
cp /home/eqemu/source/EQEmuServer/eqlaunch/eqlaunch .
cd /home/eqemu/server/
Also get rid of remnant svn info the easy way...
rmdir -rf quests
rmdir -rf plugins
rmdir -rf Maps
Step 9: Getting the Maps, quests, plugins, and database files
The Maps file is HUGE and will take some time to download. It tooke me almost 30 minutes with Comcast cable.
wget http://downloads.sourceforge.net/project/eqemulator/EQEmulator%20Map%20Files/EQEmulator%20Map%20Pack%201.0/Maps.tar.gz?r=http%3A%2F%2Fsourceforge.net%2Fproje cts%2Feqemulator%2Ffiles%2FEQEmulator%2520Map%2520 Files%2FEQEmulator%2520Map%2520Pack%25201.0%2F&ts=1341628165&use_mirror=voxel
tar -xvf Maps.tar.gz
cd /home/eqemu/server/quests
svn checkout http://projecteqquests.googlecode.com/svn/trunk/quests .
cd /home/eqemu/server/plugins
svn checkout https://eqemupluginsrepo.googlecode.com/svn/trunk .
cd /home/eqemu/server
svn checkout http://projecteqdb.googlecode.com/svn/trunk .
Step 10: Creating and populating the database
Follow Database Setup and Patching instructions here:
http://www.eqemulator.net/wiki/wikka.php?wakka=DebianLinuxOnVMware
Step 11: Editing your configuration files
Follow EQEmu Setup instruction here
http://www.eqemulator.net/wiki/wikka.php?wakka=DebianLinuxOnVMware
Step 12: Creating Statup/Shutdown Scripts
Follow the "Create your Server start and stop files" from this guide:
http://www.eqemulator.net/wiki/wikka.php?wakka=DebianLinuxOnVMware
Now change the ownership of your /home/eqemu folder to eqemu:users
chown -R eqemu:users /home/eqemu
Step 13: Linux Firewall Settings
edit your iptables file
vi /etc/sysconfig/iptables
Now paste in the following...
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 80 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 443 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 137 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 138 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 137 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 138 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 139 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 445 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 53 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 53 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 1194 --state NEW -j ACCEPT
-A INPUT -p tcp --dport 5998:5999 -j ACCEPT
-A OUTPUT -p tcp --dport 5998:5999 -j ACCEPT
-A FORWARD -p tcp --dport 5998:5999 -j ACCEPT
-A INPUT -p udp --dport 5998:5999 -j ACCEPT
-A OUTPUT -p udp --dport 5998:5999 -j ACCEPT
-A FORWARD -p udp --dport 5998:5999 -j ACCEPT
-A INPUT -p tcp --dport 7000:7100 -j ACCEPT
-A OUTPUT -p tcp --dport 7000:7100 -j ACCEPT
-A FORWARD -p tcp --dport 7000:7100 -j ACCEPT
-A INPUT -p udp --dport 7000:7100 -j ACCEPT
-A OUTPUT -p udp --dport 7000:7100 -j ACCEPT
-A FORWARD -p udp --dport 7000:7100 -j ACCEPT
-A INPUT -p tcp --dport 7778:7779 -j ACCEPT
-A OUTPUT -p tcp --dport 7778:7779 -j ACCEPT
-A FORWARD -p tcp --dport 7778:7779 -j ACCEPT
-A INPUT -p udp --dport 7778:7779 -j ACCEPT
-A OUTPUT -p udp --dport 7778:7779 -j ACCEPT
-A FORWARD -p udp --dport 7778:7779 -j ACCEPT
-A INPUT -p tcp --dport 9080 -j ACCEPT
-A OUTPUT -p tcp --dport 9080 -j ACCEPT
-A FORWARD -p tcp --dport 9080 -j ACCEPT
-A INPUT -p udp --dport 9080 -j ACCEPT
-A OUTPUT -p udp --dport 9080 -j ACCEPT
-A FORWARD -p udp --dport 9080 -j ACCEPT
-A INPUT -p tcp --dport 10000 -j ACCEPT
-A OUTPUT -p tcp --dport 10000 -j ACCEPT
-A FORWARD -p tcp --dport 10000 -j ACCEPT
-A INPUT -p udp --dport 10000 -j ACCEPT
-A OUTPUT -p udp --dport 10000 -j ACCEPT
-A FORWARD -p udp --dport 10000 -j ACCEPT
-A INPUT -p TCP -s localhost --dport 9000 -j ACCEPT
-A OUTPUT -p TCP -s localhost --dport 9000 -j ACCEPT
-A INPUT -p TCP -s localhost --dport 3306 -j ACCEPT
-A OUTPUT -p TCP -s localhost --dport 3306 -j ACCEPT
-I INPUT -p tcp --dport 8888 -j ACCEPT
-I OUTPUT -p tcp --dport 8888 -j ACCEPT
-I FORWARD -p tcp --dport 8888 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
Now restart iptables
service iptables restart
Step 13: What now?
A few things that will make life easier for you as an admin:
Learn to use Webmin
Setup your VSFTP or Samba to make file transfer easy
Setup chron jobs for your backups (database and file)
Check, and check again your firewall and security settings
look for possible integration with fail2ban
If you don't have a UPS now, go get one, and plug in your server, router, and cable modem to it.
Google thought police, and get a VMWARE CentOS 6.2 i386 player images to use as your dev/test server.
This guide well tell you, step by step, how to install cEntOS 6.2 and get up and running with the latest EQEmulator. A few references are made to previous guides where it makes sense.
I enjoyed writing and testing the guide, and hope it may help other cEntOS fans out there.
Although it is possible to get everything running on 64 bit, the returns are diminishing, and as of today, there is no compelling reason to go the 64 bit route. So, for all intents and purposes, this guide is for i386 (32 bit).
Requirements
A server, desktop, or laptop with the following specifications and features:
Intel Pentium 4 or better CPU (or AMD equivalent)
Between 512MB and 4GB RAM
VGA (nothing special)
Ethernet adapter connected to the internet
A keyboard and monitor (used only until webmin and SSH are running)
A drive to install the OS and Apps on with at least 10GB capacity (a USB drive works fine, albeit slower than a HDD)
A DVD Rom drive, or USB stick (other than target USB stick, if using) used only for installing the OS.
Another computer with a DVD burner, or a USB drive to put the install disk on.
Not required, but recommended, an uninterruptable power source (UPS) for your server, router, and cable modem (or whatever connects you to the internet)
Assumptions
This guide assumes you have a basic understanding of how to use google.com to find answers before asking here, basic understanding of vim (aka vi) editor (or the ability to google it and learn in 2 minutes), same with puTTy, and know how to forward ports on your router.
Step 1: Getting cEntOS 6.2
Download and burn cEntOS 6.2
http://mirror.centos.org/centos/6.2/isos/i386/CentOS-6.2-i386-bin-DVD1to2.torrent
(http://mirror.centos.org/centos/6.2/isos/i386/CentOS-6.2-i386-bin-DVD1to2.torrent)
You will only need to burn Disk 1
Step 2: Preparing the cEntOS 6.2 installation disk
Boot your server to the DVD or USB drive you burned the install disk to.
Choose "Basic Server" from the install list, and don't worry about trying to setup the firewall, etc at this time.
After the installation is complete, your server will reboot.
Step 3: Activate your Ethernet Adapter
Now you are ready to begin preparing your server. Login as root, and enable your eth0 adapter (your Ethernet adapter) by editing the ifcfg-eth0 file:
vi /etc/sysconfig/networking/devices/ifcfg-eth0
Find the line with "set ONBOOT=" and make sure it is set to
ONBOOT=yes
Now press CTRL+ALT+DEL and restart your server. When it comes back up, after you login, check that your eth0 is functioning with ifconfig:
ifconfig
If your results are similar to the ones below, you are ready for the next step. Otherwise, re-read step 3 and check for typos.
eth0 Link encap:Ethernet HWaddr F8:0F:41:3B:EC:84
inet addr:192.168.1.21 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::fa0f:41ff:fe3b:ec84/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:754653 errors:0 dropped:0 overruns:0 frame:0
TX packets:469526 errors:2 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1045464965 (997.0 MiB) TX bytes:41940512 (39.9 MiB)
Interrupt:27 Base address:0xa000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:199 errors:0 dropped:0 overruns:0 frame:0
TX packets:199 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:20240 (19.7 KiB) TX bytes:20240 (19.7 KiB)
Step 4: Losing your Head!
With a network connection, now it's time to get your server ready to become headless (without a keyboard, mouse, and monitor).
Install and Start SSH, so you can puTTy instead of your current keyboard and monitor.
Q: Why? You may ask? A: So you can cut/paste for the rest of this guide and save space and power.
Install SSH
yum -y install openssh-server openssh-clients
Now Start the SSH Service and check that the default port 22 is open
chkconfig sshd on
service sshd start
netstat -tulpn | grep :22
Now, we need to add some rules to the firewall, so that SSH access is only possible from your home network. For this guide, we assume 192.168.1.0/24.
Edit /etc/sysconfig/iptables (IPv4 firewall),
# vi /etc/sysconfig/iptables
Add the line
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
If you want to restict access to 192.168.1.0/24, edit it as follows:
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p tcp --dport 22 -j ACCEPT
If for some reason you also plan to use IPv6 on your server, also add this line:
-A RH-Firewall-1-INPUT -m tcp -p tcp --dport 22 -j ACCEPT
Save and close the file. Restart iptables:
# service iptables restart
Now, login as root to your server using puTTy (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html), put away that keyboard and monitor you dont need anymore, and enjoy the copy pasta for the rest of this guide!
Step 5: Installing the necessary software
Now it's time to install the software needed to compile and maintain EQEmulator.
yum install -y openssl mysql-server gcc mysql-devel svn perl-IO-stringy make gcc-c++ perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker perl-ExtUtils-Embed cpan httpd mod_ssl
cpan ExtUtils::Install
#note: enter "yes" at the prompt when installing ExtUtils
Step 6: Installing Webmin
wget http://www.webmin.com/download/rpm/webmin-current.rpm
rpm –import http://www.webmin.com/jcameron-key.asc
rpm -U webmin-1.590-1.noarch.rpm
#note: At the time this guide was written the current release of webmin was webmin-1.590-1.noarch.rpm. If get a file not found, it is likely because a new version was released, so check the file name.
Step 7: Getting and Compiling EQEmulator
Now, we will add a user called eqemu, then checkout the latest EQEmulator source code
adduser eqemu
cd /home/eqemu
svn checkout http://projecteqemu.googlecode.com/svn/trunk/ source
cd /home/eqemu/source/EQEmuServer
make clean
make
Be patient, the compile time can take anywhere from 5 minutes to an hour depending on your server performance.
Step 8: Moving the compiled binaries to their new home
cd /home/eqemu
mkdir server
cd /home/eqemu/server
cp –a /home/eqemu/source/EQEmuServer/utils/defaults/* .
cp /home/eqemu/source/EQEmuServer/utils/patch_* .
cp /home/eqemu/source/EQEmuServer/utils/cleanipc .
cp /home/eqemu/source/EQEmuServer/world/world .
cp /home/eqemu/source/EQEmuServer/zone/zone .
cp /home/eqemu/source/EQEmuServer/EMuShareMem/libEMuShareMem.so .
cp /home/eqemu/source/EQEmuServer/eqlaunch/eqlaunch .
cd /home/eqemu/server/
Also get rid of remnant svn info the easy way...
rmdir -rf quests
rmdir -rf plugins
rmdir -rf Maps
Step 9: Getting the Maps, quests, plugins, and database files
The Maps file is HUGE and will take some time to download. It tooke me almost 30 minutes with Comcast cable.
wget http://downloads.sourceforge.net/project/eqemulator/EQEmulator%20Map%20Files/EQEmulator%20Map%20Pack%201.0/Maps.tar.gz?r=http%3A%2F%2Fsourceforge.net%2Fproje cts%2Feqemulator%2Ffiles%2FEQEmulator%2520Map%2520 Files%2FEQEmulator%2520Map%2520Pack%25201.0%2F&ts=1341628165&use_mirror=voxel
tar -xvf Maps.tar.gz
cd /home/eqemu/server/quests
svn checkout http://projecteqquests.googlecode.com/svn/trunk/quests .
cd /home/eqemu/server/plugins
svn checkout https://eqemupluginsrepo.googlecode.com/svn/trunk .
cd /home/eqemu/server
svn checkout http://projecteqdb.googlecode.com/svn/trunk .
Step 10: Creating and populating the database
Follow Database Setup and Patching instructions here:
http://www.eqemulator.net/wiki/wikka.php?wakka=DebianLinuxOnVMware
Step 11: Editing your configuration files
Follow EQEmu Setup instruction here
http://www.eqemulator.net/wiki/wikka.php?wakka=DebianLinuxOnVMware
Step 12: Creating Statup/Shutdown Scripts
Follow the "Create your Server start and stop files" from this guide:
http://www.eqemulator.net/wiki/wikka.php?wakka=DebianLinuxOnVMware
Now change the ownership of your /home/eqemu folder to eqemu:users
chown -R eqemu:users /home/eqemu
Step 13: Linux Firewall Settings
edit your iptables file
vi /etc/sysconfig/iptables
Now paste in the following...
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 80 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 443 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 137 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 138 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 137 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 138 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 139 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 445 --state NEW -j ACCEPT
-A INPUT -p tcp -m state -m tcp --dport 53 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 53 --state NEW -j ACCEPT
-A INPUT -p udp -m state -m udp --dport 1194 --state NEW -j ACCEPT
-A INPUT -p tcp --dport 5998:5999 -j ACCEPT
-A OUTPUT -p tcp --dport 5998:5999 -j ACCEPT
-A FORWARD -p tcp --dport 5998:5999 -j ACCEPT
-A INPUT -p udp --dport 5998:5999 -j ACCEPT
-A OUTPUT -p udp --dport 5998:5999 -j ACCEPT
-A FORWARD -p udp --dport 5998:5999 -j ACCEPT
-A INPUT -p tcp --dport 7000:7100 -j ACCEPT
-A OUTPUT -p tcp --dport 7000:7100 -j ACCEPT
-A FORWARD -p tcp --dport 7000:7100 -j ACCEPT
-A INPUT -p udp --dport 7000:7100 -j ACCEPT
-A OUTPUT -p udp --dport 7000:7100 -j ACCEPT
-A FORWARD -p udp --dport 7000:7100 -j ACCEPT
-A INPUT -p tcp --dport 7778:7779 -j ACCEPT
-A OUTPUT -p tcp --dport 7778:7779 -j ACCEPT
-A FORWARD -p tcp --dport 7778:7779 -j ACCEPT
-A INPUT -p udp --dport 7778:7779 -j ACCEPT
-A OUTPUT -p udp --dport 7778:7779 -j ACCEPT
-A FORWARD -p udp --dport 7778:7779 -j ACCEPT
-A INPUT -p tcp --dport 9080 -j ACCEPT
-A OUTPUT -p tcp --dport 9080 -j ACCEPT
-A FORWARD -p tcp --dport 9080 -j ACCEPT
-A INPUT -p udp --dport 9080 -j ACCEPT
-A OUTPUT -p udp --dport 9080 -j ACCEPT
-A FORWARD -p udp --dport 9080 -j ACCEPT
-A INPUT -p tcp --dport 10000 -j ACCEPT
-A OUTPUT -p tcp --dport 10000 -j ACCEPT
-A FORWARD -p tcp --dport 10000 -j ACCEPT
-A INPUT -p udp --dport 10000 -j ACCEPT
-A OUTPUT -p udp --dport 10000 -j ACCEPT
-A FORWARD -p udp --dport 10000 -j ACCEPT
-A INPUT -p TCP -s localhost --dport 9000 -j ACCEPT
-A OUTPUT -p TCP -s localhost --dport 9000 -j ACCEPT
-A INPUT -p TCP -s localhost --dport 3306 -j ACCEPT
-A OUTPUT -p TCP -s localhost --dport 3306 -j ACCEPT
-I INPUT -p tcp --dport 8888 -j ACCEPT
-I OUTPUT -p tcp --dport 8888 -j ACCEPT
-I FORWARD -p tcp --dport 8888 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
Now restart iptables
service iptables restart
Step 13: What now?
A few things that will make life easier for you as an admin:
Learn to use Webmin
Setup your VSFTP or Samba to make file transfer easy
Setup chron jobs for your backups (database and file)
Check, and check again your firewall and security settings
look for possible integration with fail2ban
If you don't have a UPS now, go get one, and plug in your server, router, and cable modem to it.
Google thought police, and get a VMWARE CentOS 6.2 i386 player images to use as your dev/test server.