chiark / gitweb /
roadstar.m4, telecaster.m4: No need to open the `ftp_data' port.
[firewall] / telecaster.m4
index 4e7c787c69c237a88c5b83e1286e590f85c0f86e..1180375979412076bb74fd6d0995ed103413a1ff 100644 (file)
@@ -29,7 +29,8 @@ m4_divert(86)m4_dnl
 allowservices inbound tcp \
        ssh \
        ident \
-       ftp ftp_data \
+       smtp \
+       ftp \
        rsync \
        http https squid ssquid
 
@@ -39,6 +40,7 @@ run iptables -A inbound -j ACCEPT \
 
 ## Other interesting things.
 dnsresolver inbound
+dnsserver inbound
 
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------