firewall: allow udp/123 if ntpd is available.
This commit is contained in:
parent
a9e353fe37
commit
3a21bf0eae
8
firewall
8
firewall
|
@ -205,9 +205,11 @@ fi
|
||||||
$IPT -A OUTPUT -j ACCEPT -p tcp -o ${ILAN} --dport 80 -m state --state NEW -m comment --comment "HTTP out"
|
$IPT -A OUTPUT -j ACCEPT -p tcp -o ${ILAN} --dport 80 -m state --state NEW -m comment --comment "HTTP out"
|
||||||
$IPT -A OUTPUT -j ACCEPT -p tcp -o ${ILAN} --dport 443 -m state --state NEW -m comment --comment "HTTPS out"
|
$IPT -A OUTPUT -j ACCEPT -p tcp -o ${ILAN} --dport 443 -m state --state NEW -m comment --comment "HTTPS out"
|
||||||
|
|
||||||
# #### NTP
|
if [ $(command -v ntpd) ]; then
|
||||||
# $IPT -A OUTPUT -j ACCEPT -p udp -o ${ILAN} --dport 123 -m state --state NEW -m comment --comment "NTP"
|
#### NTP
|
||||||
#
|
$IPT -A OUTPUT -j ACCEPT -p udp -o ${ILAN} --dport 123 -m state --state NEW -m comment --comment "NTP out"
|
||||||
|
fi
|
||||||
|
|
||||||
# #### Puppet (connection, ... )
|
# #### Puppet (connection, ... )
|
||||||
# $IPT -A OUTPUT -j ACCEPT -p tcp -o "${ILAN}" --dport 8140 -m state --state NEW -m comment --comment "Puppet out"
|
# $IPT -A OUTPUT -j ACCEPT -p tcp -o "${ILAN}" --dport 8140 -m state --state NEW -m comment --comment "Puppet out"
|
||||||
#### OpenPGP HTTP key server (add key, maj, ...)
|
#### OpenPGP HTTP key server (add key, maj, ...)
|
||||||
|
|
Loading…
Reference in New Issue