The port, 51235
The protocol, tcp
As such, the allow_certmaster() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
CIFS is a communication and discovery protocol collection that requires multiple ports and multiple protocols to be available, including:
netbios-ns, over port 137 using the udp protocol.
netbios-dgm, over port 138 using the udp protocol.
netbios-ssn, over port 139 using the tcp protocol.
As such, the allow_cifs() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 53
The protocol, udp
As such, the allow_dns_queries() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 53
The protocol, tcp
As such, the allow_dns_transfers() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The
allow_ftp() function therefor shortcuts one call to
allow_standard_protocol() for the incoming connection over port
21 using the
tcp protocol. Other rules inserted in the preferred chain include the necessary rule for opening up the data channel (the server communicates such back to the client from source port
20 over the
udp protocol), and the final data transfer channel, which is determined in real-time and without prior specification. As such, the
ipt_conntrack_ftp module needs to be loaded into the kernel.
The port, 51234
The protocol, tcp
As such, the allow_func() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 9418
The protocol, tcp
As such, the allow_git() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 80
The protocol, tcp
As such, the allow_http() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 443
The protocol, tcp
As such, the allow_https() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
As such, the allow_icmp() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 143
The protocol, tcp
As such, the allow_imap() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 993
The protocol, tcp
As such, the allow_imaps() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 631
The protocol, tcp
As such, the allow_ipp() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 88
The protocols, tcp, and udp
As such, the allow_kerberos() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 389
The protocol, tcp
As such, the allow_ldap() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 636
The protocol, tcp
As such, the allow_ldaps() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 515
The protocol, tcp
As such, the allow_lpd() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 445
The protocols, tcp and udp
As such, the allow_microsoft_ds() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 3306
The protocol, tcp
As such, the allow_mysql() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
Additionally, it places the following calls to the following non-standard functions, supplying to those functions the very same arguments that were passed to the allow_nfs() function call:
Each of these functions (except for allow_rpcbind) does some kind of exotic thing, so please make sure you read the details on each (except for allow_rpcbind) before using the allow_nfs() function.
The port, 5666
The protocol, tcp
As such, the allow_nrpe() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 123
The protocol, udp
As such, the allow_ntp() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
In order to determine the port and protocol, the allow_openvpn() function attempts to get those settings from /etc/openvpn/server.conf, using the following commands:
port=`grep ^port /etc/openvpn/server.conf | awk '{print $2}'`
proto=`grep ^proto /etc/openvpn/server.conf | awk '{print $2}'`
If the function can discover the port and protocol, these are used in a call to
allow_standard_protocol() as the first two parameters.
Should the function be unable to determine the port and protocol from
/etc/openvpn/server.conf, then it ceases (breaks), and you should return to using
allow_standard_protocol().
That said, the allow_openvpn() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 110
The protocol, tcp
As such, the allow_pop() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 995
The protocol, tcp
As such, the allow_pops() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 5432
The protocol, tcp
As such, the allow_postgres() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 8140
The protocol, tcp
As such, the allow_puppet() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 111
The protocol, tcp
As such, the allow_rpcbind() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
Should the allow_rpclockd() be unable to discover the tcp and udp ports for the NFS lock manager, then this function does not insert any new rules to iptables.
Using /etc/sysconfig/nfs encouraged!
The settings in /etc/sysconfig/nfs let you define the ports for services related to NFSv3, as opposed to having these ports assigned to the services through port mapping (the rpcbind or portmap service). As such, it is the only way to control the ports assigned to these services, and thus also the only way to control the firewall opening up certain ports related to these services.
That said, the allow_rpclockd() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
Should the allow_rpcmountd() be unable to discover the port number for the NFS mount daemon, then this function does not insert any new rules to iptables.
Using /etc/sysconfig/nfs encouraged!
The settings in /etc/sysconfig/nfs let you define the ports for services related to NFSv3, as opposed to having these ports assigned to the services through port mapping (the rpcbind or portmap service). As such, it is the only way to control the ports assigned to these services, and thus also the only way to control the firewall opening up certain ports related to these services.
That said, the allow_rpcmountd() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
Should the allow_rpcrquotad() be unable to discover the port number for the NFS mount daemon, then this function does not insert any new rules to iptables.
Using /etc/sysconfig/nfs encouraged!
The settings in /etc/sysconfig/nfs let you define the ports for services related to NFSv3, as opposed to having these ports assigned to the services through port mapping (the rpcbind or portmap service). As such, it is the only way to control the ports assigned to these services, and thus also the only way to control the firewall opening up certain ports related to these services.
That said, the allow_rpcrquotad() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 873
The protocol, tcp
As such, the allow_rsync() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 25
The protocol, tcp
As such, the allow_smtp() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 9418
The protocol, tcp
As such, the allow_snmp() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 9418
The protocol, tcp
As such, the allow_snmptrap() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 9418
The protocol, tcp
As such, the allow_git() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)
The port, 9418
The protocol, tcp
As such, the allow_git() function allows only three parameters, all of which are optional:
The source IP address or network (default: 0/0)
The destination IP address or network (default: 0/0)
The chain this rule should be in, using the (default: INPUT)