From: Matthijs Kooijman Date: Mon, 26 Jul 2010 13:43:09 +0000 (+0200) Subject: vuurmuur: No longer forward ident connections to login. X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fservers%2Fdrsnuggles.git;a=commitdiff_plain;h=95de8f93274f10501f8121c5c765f552c136c8c9 vuurmuur: No longer forward ident connections to login. There will be a NAT-aware identd server on the host, so forwarding to a single vserver is no longer needed. --- diff --git a/etc/vuurmuur/rules/rules.conf b/etc/vuurmuur/rules/rules.conf index e9e2ea9..ab06d8a 100644 --- a/etc/vuurmuur/rules/rules.conf +++ b/etc/vuurmuur/rules/rules.conf @@ -23,6 +23,4 @@ RULE="Dnat service locus from world.inet to login.vservers.internal options in_i RULE="Accept service locus from world.inet to firewall options in_int=\"vserver-login-nic\"" RULE="Dnat service telnet from world.inet to www.vservers.internal options in_int=\"inet-nic\",remoteport=\"2323\",comment=\"Hunternet gameserver\"" RULE="Accept service telnet-nonpriv from world.inet to firewall options in_int=\"vserver-www-nic\",comment=\"Hunternet gameserver\"" -RULE="Dnat service ident from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Identd for login\"" -RULE="Accept service ident from world.inet to firewall options in_int=\"vserver-login-nic\",comment=\"Identd for login\"" RULE="Drop service dhcp from any to any options comment=\"Drop all DHCP without logging\""