[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

firewall changes for F-9+



Hello,

here are the latest changes for system-config-firewall for F-9+:

The usage of --port=<port>:<proto> for lokkit will open up this port and not a service using this port anymore. To enable a service you have to use the new --service=<name> option. There are no magic default open services. You have to open up the services, you want to use. The interim options --no-X; X in ["ipsec", "mdns", "ipp"] are obsolete now.

To setup a new firewall, you can use the new --default=<name> configuration option as a start:
  server  : ssh is enabled
  desktop : ipsec, mdns and ipp are enabled

These changes for lokkit also affect the kickstart firewall configuration.

There is an utility to convert existing configurations, which will be used automatically while updating the package.

Thanks,
Thomas


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]