Firewall Fix

Firewall Fix

[R. W. Rodolico]

[-- Attachment #1: Type: text/plain, Size: 833 bytes --]

I was working with the firewall today and noticed the following three
ports are not in the default list of ports.

SUBMISSION 587 (TCP AND UDP)
SSMTP      465

I suggest they be added. I did a quick look and did not see where they
came from for sure, but maybe
/var/ipfire/fwhosts/customservices.default? If so, it looks like the
following three lines added to that file would work:

35,SUBMISSION (TCP),587,TCP,BLANK,0
36,SUBMISSION (UDP),587,UDP,BLANK,0
37,SSMTP,465,TCP,BLANK,0

I do NOT know what the first number is, but since it is not duplicated
and is 1-number of entries, I assume it is a unique index.

NOTE: I tried modifying that file on my test router and it did not work,
so that may not be the correct place.

Rod
-- 
Rod Rodolico
Daily Data, Inc.
POB 140465
Dallas TX 75214-0465
214.827.2170
http://www.dailydata.net

Re: Firewall Fix

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 883 bytes --]

@Alex: Could you have a look at this, please?

On Tue, 2016-07-19 at 01:45 -0500, R. W. Rodolico wrote:
> I was working with the firewall today and noticed the following three
> ports are not in the default list of ports.
> 
> SUBMISSION 587 (TCP AND UDP)
> SSMTP      465
> 
> I suggest they be added. I did a quick look and did not see where they
> came from for sure, but maybe
> /var/ipfire/fwhosts/customservices.default? If so, it looks like the
> following three lines added to that file would work:
> 
> 35,SUBMISSION (TCP),587,TCP,BLANK,0
> 36,SUBMISSION (UDP),587,UDP,BLANK,0
> 37,SSMTP,465,TCP,BLANK,0
> 
> I do NOT know what the first number is, but since it is not duplicated
> and is 1-number of entries, I assume it is a unique index.
> 
> NOTE: I tried modifying that file on my test router and it did not work,
> so that may not be the correct place.
> 
> Rod

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

Re: Firewall Fix

[Alexander Marx]

[-- Attachment #1: Type: text/plain, Size: 952 bytes --]

sure

Am 20.07.2016 um 17:32 schrieb Michael Tremer:
> @Alex: Could you have a look at this, please?
>
> On Tue, 2016-07-19 at 01:45 -0500, R. W. Rodolico wrote:
>> I was working with the firewall today and noticed the following three
>> ports are not in the default list of ports.
>>
>> SUBMISSION 587 (TCP AND UDP)
>> SSMTP      465
>>
>> I suggest they be added. I did a quick look and did not see where they
>> came from for sure, but maybe
>> /var/ipfire/fwhosts/customservices.default? If so, it looks like the
>> following three lines added to that file would work:
>>
>> 35,SUBMISSION (TCP),587,TCP,BLANK,0
>> 36,SUBMISSION (UDP),587,UDP,BLANK,0
>> 37,SSMTP,465,TCP,BLANK,0
>>
>> I do NOT know what the first number is, but since it is not duplicated
>> and is 1-number of entries, I assume it is a unique index.
>>
>> NOTE: I tried modifying that file on my test router and it did not work,
>> so that may not be the correct place.
>>
>> Rod

Re: Firewall Fix

[Alexander Marx]

[-- Attachment #1: Type: text/plain, Size: 1103 bytes --]

Patch under http://patchwork.ipfire.org/patch/693/

cheers

Alex


Am 20.07.2016 um 19:01 schrieb Alexander Marx:
> sure
>
> Am 20.07.2016 um 17:32 schrieb Michael Tremer:
>> @Alex: Could you have a look at this, please?
>>
>> On Tue, 2016-07-19 at 01:45 -0500, R. W. Rodolico wrote:
>>> I was working with the firewall today and noticed the following three
>>> ports are not in the default list of ports.
>>>
>>> SUBMISSION 587 (TCP AND UDP)
>>> SSMTP      465
>>>
>>> I suggest they be added. I did a quick look and did not see where they
>>> came from for sure, but maybe
>>> /var/ipfire/fwhosts/customservices.default? If so, it looks like the
>>> following three lines added to that file would work:
>>>
>>> 35,SUBMISSION (TCP),587,TCP,BLANK,0
>>> 36,SUBMISSION (UDP),587,UDP,BLANK,0
>>> 37,SSMTP,465,TCP,BLANK,0
>>>
>>> I do NOT know what the first number is, but since it is not duplicated
>>> and is 1-number of entries, I assume it is a unique index.
>>>
>>> NOTE: I tried modifying that file on my test router and it did not 
>>> work,
>>> so that may not be the correct place.
>>>
>>> Rod
>