firewalld vs iptables vs ? as default (was Comparison to Workstation Technical Specification)

Thu Mar 6 21:28:27 UTC 2014


Am 06.03.2014 22:13, schrieb Miloslav Trmač:
> 2014-03-06 22:03 GMT+01:00 Simo Sorce <simo at redhat.com <mailto:simo at redhat.com>>:
>     Sorry I do not understand what you are saying here.
> 
> $ fedora-role-deploy postgresql
> # Huh, it is refusing connections?
> # Ah, firewall...
> $ fedora-role-deploy --open-firewall-ports potgresql
> # That's how it is done in Fedora, then.  Good to know.

right direction

> # Time passes...
> 
> $ fedora-role-deploy freeipa
> # Huh, this is already accessible?

that must not happen

* not from usability point of view
* not from security point of view - *no* open ports *never ever* as default

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 246 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/server/attachments/20140306/00205696/attachment.sig>