From 95de8f93274f10501f8121c5c765f552c136c8c9 Mon Sep 17 00:00:00 2001 From: Matthijs Kooijman Date: Mon, 26 Jul 2010 15:43:09 +0200 Subject: [PATCH] vuurmuur: No longer forward ident connections to login. There will be a NAT-aware identd server on the host, so forwarding to a single vserver is no longer needed. --- etc/vuurmuur/rules/rules.conf | 2 -- 1 file changed, 2 deletions(-) diff --git a/etc/vuurmuur/rules/rules.conf b/etc/vuurmuur/rules/rules.conf index e9e2ea9..ab06d8a 100644 --- a/etc/vuurmuur/rules/rules.conf +++ b/etc/vuurmuur/rules/rules.conf @@ -23,6 +23,4 @@ RULE="Dnat service locus from world.inet to login.vservers.internal options in_i RULE="Accept service locus from world.inet to firewall options in_int=\"vserver-login-nic\"" RULE="Dnat service telnet from world.inet to www.vservers.internal options in_int=\"inet-nic\",remoteport=\"2323\",comment=\"Hunternet gameserver\"" RULE="Accept service telnet-nonpriv from world.inet to firewall options in_int=\"vserver-www-nic\",comment=\"Hunternet gameserver\"" -RULE="Dnat service ident from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Identd for login\"" -RULE="Accept service ident from world.inet to firewall options in_int=\"vserver-login-nic\",comment=\"Identd for login\"" RULE="Drop service dhcp from any to any options comment=\"Drop all DHCP without logging\"" -- 2.30.2