Explorar el Código

Don't open unused ports

Sovereign does not currently use jabber/xmpp or insecure smtp.
Allen Riddell hace 11 años
padre
commit
580e3ef5c1
Se han modificado 1 ficheros con 2 adiciones y 2 borrados
  1. 2
    2
      roles/common/files/etc_ferm_ferm.conf

+ 2
- 2
roles/common/files/etc_ferm_ferm.conf Ver fichero

@@ -16,8 +16,8 @@ table filter {
16 16
         proto icmp icmp-type echo-request ACCEPT;
17 17
 
18 18
         # expose our services to the world:
19
-        # web, ssh, imap + ssl, smtp + ssl, jabber/xmpp, dns, znc
20
-        proto tcp dport (53 http https ssh smtp 993 465 5222 5223 5269 6697) ACCEPT;
19
+        # dns, web, ssh, imap + ssl, smtp + ssl, znc
20
+        proto tcp dport (53 http https ssh 993 465 6697) ACCEPT;
21 21
 
22 22
         # openvpn
23 23
         proto udp dport 1194 ACCEPT;

Loading…
Cancelar
Guardar