entrouvert
/
eofirewall
Archived
17
0
Fork 0
Code Issues Pull Requests Releases Activity

Compare commits

merge into: entrouvert:master
Branches Tags
entrouvert:master
entrouvert:e7acd2447988c56c4c7345227eb120eae950c1f8
entrouvert:debian
entrouvert:0.1
...
pull from: entrouvert:e7acd2447988c56c4c7345227eb120eae950c1f8
Branches Tags
entrouvert:e7acd2447988c56c4c7345227eb120eae950c1f8
entrouvert:master
entrouvert:debian
entrouvert:0.1
This repository has been archived on 2023-02-21. You can view files and clone it, but cannot push or open issues or pull requests.

2 Commits
master ... e7acd24479

Author SHA1 Message Date
Jérôme Schneider 5dcff45f98 ferm: don't filter input by interface but only by ip 
This allows VMs to talk to the host (Closes #6251)
 2015-01-07 15:20:36 +01:00
Jérôme Schneider e7acd24479 ferm: accept ldap and ldaps output for the VMs 2015-01-07 15:20:36 +01:00
1 changed files with 2 additions and 2 deletions
Show Stats Expand all files Collapse all files

4
ferm/ferm.conf
View File

@ -65,7 +65,7 @@ table filter {
proto icmp icmp-type echo-request ACCEPT;
# local services
interface $DEV_WAN daddr $IP_WAN mod state state NEW {
daddr $IP_WAN mod state state NEW {
# DNS requests
@if $DNS_ON_WAN proto (udp tcp) dport 53
mod comment comment "DNS on WAN"
@ -122,7 +122,7 @@ table filter {
# from VMS to Internet: ssh, web, dns, ping
outerface $DEV_WAN {
proto tcp mod multiport destination-ports (53 22 80 443)
proto tcp mod multiport destination-ports (53 22 80 389 443 636)
mod state state NEW
ACCEPT;
proto udp dport 53