~mdw
/
firewall
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Makefile: If the user overrides HOSTS, don't install locally anyway.
[firewall]
/
vampire.m4
diff --git
a/vampire.m4
b/vampire.m4
index
b3257c7
..
34d5fde
100644
(file)
--- a/
vampire.m4
+++ b/
vampire.m4
@@
-28,7
+28,6
@@
m4_divert(86)m4_dnl
## Externally visible services.
allowservices inbound tcp \
finger ident \
## Externally visible services.
allowservices inbound tcp \
finger ident \
- dns iodine \
ssh \
smtp submission \
gnutella_svc \
ssh \
smtp submission \
gnutella_svc \
@@
-40,7
+39,6
@@
allowservices inbound tcp \
git \
tor_public tor_directory i2p
allowservices inbound udp \
git \
tor_public tor_directory i2p
allowservices inbound udp \
- dns iodine \
tripe \
gnutella_svc \
i2p
tripe \
gnutella_svc \
i2p
@@
-52,6
+50,7
@@
run ip6tables -A inbound -j inbound-untrusted -s $net_inet6_untrusted
allowservices inbound-untrusted tcp \
dns \
allowservices inbound-untrusted tcp \
dns \
+ lpd \
netbios_ssn microsoft_ds
allowservices inbound-untrusted udp \
dns \
netbios_ssn microsoft_ds
allowservices inbound-untrusted udp \
dns \
@@
-68,6
+67,7
@@
run iptables -A OUTPUT -m multiport \
## Other interesting things.
dnsresolver inbound
## Other interesting things.
dnsresolver inbound
+dnsserver inbound
ntpclient inbound $ntp_servers
m4_divert(-1)
ntpclient inbound $ntp_servers
m4_divert(-1)