numbers.m4, vampire.m4: Expose print server to local untrusted hosts.

[firewall] / radius.m4

diff --git a/radius.m4 b/radius.m4
index 2d5f8aa..b8481bb 100644 (file)
--- a/radius.m4
+++ b/radius.m4
@@ -88,7 +88,10 @@ for p in ftp sip h323; do
   run modprobe nf_nat_$p
 done
 
-## Forbid anything complicated to the NAT address.
+## Forbid anything complicated to the NAT address.  Be sure to allow ident,
+## though.
+run iptables -A INPUT -d 62.49.204.158 -p tcp -j ACCEPT \
+       -m multiport --destination-ports=113
 run iptables -A INPUT -d 62.49.204.158 ! -p icmp -j REJECT
 
 m4_divert(-1)