Re: Proposal for adding "firewall_myservices_udp" in etc/rc.conf

From: Adrian Chadd <adrian_at_freebsd.org>
Date: Mon, 13 Oct 2014 10:30:56 -0700
Please add a myservices for IP protocols. I'd like to allow things
like GRE so PPTP works.

(This is great - now I can have tftp work through the rc.conf firewall!0

Thanks!


-a


On 10 October 2014 13:38, Olivier Cochard-Labbé <olivier_at_cochard.me> wrote:
> For a simple workstation, we can use this simple configuration in
> /etc/rc.conf:
> firewall_type="workstation"
> firewall_enable="YES"
> firewall_myservices="22,80"
> firewall_allowservices="any"
>
> But the firewall_myservices allows only TCP services.
> It's not possible to declare UDP services (like a torrent client).
>
> This patch propose to add UDP services by 2 changes:
> 1. firewall_myservices became a deprecated alias, the new is
> firewall_myservices_tcp
> 2. A new firewall_myservices_udp variable is added.
>
> Patch attached to PR194292:
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194292
>
> What do you think ?
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org"
Received on Mon Oct 13 2014 - 15:30:58 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:52 UTC