numbers.m4, vampire.m4: Expose print server to local untrusted hosts.

Let's hope they don't use up all of my paper.

diff --git a/numbers.m4 b/numbers.m4
index d5ab0c19ab8307a83a41d3cb7804211bcf944cb2..f39fa99c5da589a056aeddc75d422d5bb8e18640 100644 (file)
--- a/numbers.m4
+++ b/numbers.m4
@@ -43,6 +43,7 @@ defport netbios_ssn 139
 defport https 443
 defport microsoft_ds 445
 defport syslog 514                     # UDP only!
+defport lpd 515
 defport submission 587
 defport ipmi 623
 defport rsync 873

diff --git a/vampire.m4 b/vampire.m4
index 3fb9595d83202dbdd751bc9aa851c5103330ac2d..34d5fdec9b0b187ee1b6e8c2cbd2171f3cb3ce4d 100644 (file)
--- a/vampire.m4
+++ b/vampire.m4
@@ -50,6 +50,7 @@ run ip6tables -A inbound -j inbound-untrusted -s $net_inet6_untrusted
 
 allowservices inbound-untrusted tcp \
        dns \
+       lpd \
        netbios_ssn microsoft_ds
 allowservices inbound-untrusted udp \
        dns \