fixup! WIP on emergency: 7a108d1 Makefile: New target for tracking diversions.
[firewall] / gibson.m4
index d933cad..1676153 100644 (file)
--- a/gibson.m4
+++ b/gibson.m4
@@ -49,7 +49,15 @@ m4_divert(82)m4_dnl
 ## Externally visible services.
 allowservices inbound tcp \
        ssh \
-       ident
+       ident \
+       h323
+allowservices inbound udp \
+       siplo:siphi
+
+## IMPI client hacking.
+run ip46tables -A inbound -j ACCEPT \
+       -m state --state ESTABLISHED \
+       -p udp --source-port $port_ipmi
 
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------