Attachment 450245 Details for Bug 717251

Full diff of my config file

SuSEfirewall2.diff (text/plain), 2.30 KB, created by Lukas Ocilka on 2011-09-12 14:16:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lukas Ocilka

Created: 2011-09-12 14:16:33 UTC

Size: 2.30 KB

patch

obsolete

>--- /etc/sysconfig/SuSEfirewall2.backup	2011-09-12 16:13:21.979310206 +0200
>+++ /etc/sysconfig/SuSEfirewall2	2011-09-12 16:13:42.564734325 +0200
>@@ -346,7 +346,7 @@
> # FW_SERVICES_ACCEPT_*
> #
> # Example: "samba-server nfs-server"
>-FW_CONFIGURATIONS_EXT="apache2 apache2-ssl bind postgresql sshd vnc-server"
>+FW_CONFIGURATIONS_EXT="apache2 apache2-ssl bind mysql postgresql sshd vnc-server"
> 
> ## Type:	string
> #
>@@ -446,31 +446,11 @@
> #
> # see FW_SERVICES_REJECT_EXT
> FW_SERVICES_REJECT_INT=""
>-# Example:
>-#    Allow max three ssh connects per minute from the same IP address:
>-#      "0/0,tcp,22,,hitcount=3,blockseconds=60,recentname=ssh"
>-#
>-# The special value _rpc_ is recognized as protocol and means that dport is
>-# interpreted as rpc service name. See FW_SERVICES_EXT_RPC for
>-# details.
>-#
>-# Note1: keep in mind that FW_SERVICES_EXT_TCP, FW_SERVICES_EXT_UDP
>-# take precedence over FW_SERVICES_ACCEPT_EXT so don't open the same
>-# port with both options.
>-#
>-# Note2: the iptables recent module may not be available for ipv6. To
>-# avoid an error message use 0.0.0.0/0 instead of 0/0. This will
>-# install the rule for ipv4 only.
>-#
>-FW_SERVICES_ACCEPT_EXT="0.0.0.0/0,tcp,22,,hitcount=3,blockseconds=60,recentname=ssh
>+FW_SERVICES_ACCEPT_EXT="0.0.0.0/0,tcp,22,,
> 127.0.0.0/8,tcp,mysql
> 192.168.1.0/24,tcp,3080
> 192.168.1.0/24,tcp,3493"
>-
>-## Type: string
>-#
>-# see FW_SERVICES_ACCEPT_EXT
>-FW_SERVICES_ACCEPT_DMZ="0/0,tcp,555,666,hitcount=3,blockseconds=60,recentname=ssh
>+FW_SERVICES_ACCEPT_DMZ="0/0,tcp,555,666,
> 0/0,tcp,5555,6666,hitcount=3,blockseconds=60,recentname=ssh"
> 
> AAA="xyz"
>@@ -478,7 +458,8 @@
> ## Type: string
> #
> # see FW_SERVICES_ACCEPT_EXT
>-FW_SERVICES_ACCEPT_INT="0/0,tcp,555,666,hitcount=3,blockseconds=60,recentname=ssh
>+hitcount="3,blockseconds=60,recentname=ssh"
>+FW_SERVICES_ACCEPT_INT="0/0,tcp,555,666,
> 192.168.0.1/16,udp,,1025,whatever=1
> 8.8.8.8/4,tcp,555"
> 
>@@ -497,8 +478,7 @@
> #
> # See also FW_LOAD_MODULES
> #
>-FW_SERVICES_ACCEPT_RELATED_EXT="172.16.0.0/16,udp,1111
>-0/0,udp,137"
>+FW_SERVICES_ACCEPT_RELATED_EXT="172.16.0.0/16,udp,1111 0/0,udp,137"
> 
> ## Type: string
> #
>@@ -508,11 +488,7 @@
> ## Type: string
> #
> # see FW_SERVICES_ACCEPT_RELATED_EXT
>-FW_SERVICES_ACCEPT_RELATED_INT='0/0,udp,427
>-0/0,udp,11
>-0/0,udp,22
>-0/0,udp,33
>-0/0,udp,44'
>+FW_SERVICES_ACCEPT_RELATED_INT="'0/0,udp,427"
> 
> ## Type:	string
> #

Actions: View

Attachments on bug 717251: 450245 | 450407