~mdw
/
firewall
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
eggle.m4, local.m4, local.mk: Add new VPS `eggle'.
[firewall]
/
telecaster.m4
diff --git
a/telecaster.m4
b/telecaster.m4
index
1180375
..
103d11b
100644
(file)
--- a/
telecaster.m4
+++ b/
telecaster.m4
@@
-30,10
+30,15
@@
allowservices inbound tcp \
ssh \
ident \
smtp \
ssh \
ident \
smtp \
- ftp \
+ ftp
ftps
\
rsync \
http https squid ssquid
rsync \
http https squid ssquid
+allowservices inbound-untrusted tcp \
+ sunrpc mount nfs
+allowservices inbound-untrusted udp \
+ sunrpc mount nfs
+
run iptables -A inbound -j ACCEPT \
-p udp --destination-port $port_icp \
-m limit --limit 10/second --limit-burst 100
run iptables -A inbound -j ACCEPT \
-p udp --destination-port $port_icp \
-m limit --limit 10/second --limit-burst 100