On 08/27/2015 08:37 AM, Robert Moskowitz wrote:
Over on the Samba list, I am trying to figure out what firewalld
services I need opened for all the things that a Samba AD does. I
could 'simply' take the list of iptables entries others have used and
add those ports, but I really WANT to learn about firewalld and what
its 'services' do. per:
https://fedoraproject.org/wiki/FirewallD
I was pointed to:
/usr/lib/firewalld/services
And you can define more. As I learned reading:
http://www.certdepot.net/rhel7-get-started-firewalld/
Services
A service can be a list of local ports and destinations and
additionally also a list of firewall helper modules automatically
loaded if a service is enabled. The use of predefined services makes
it easier for the user to enable and disable access to a service.
Service configuration options and generic file information are
described in the firewalld.service(5) man page.
And that manpage does not tell me what the services are and what they
map to. It is easy to learn the list of supported services:
firewall-cmd --get-services
RH-Satellite-6 amanda-client bacula bacula-client dhcp dhcpv6
dhcpv6-client dns
ftp high-availability http https imaps ipp ipp-client ipsec kerberos
kpasswd ldap
ldaps libvirt libvirt-tls mdns mountd ms-wbt mysql nfs ntp openvpn
pmcd pmproxy
pmwebapi pmwebapis pop3s postgresql proxy-dhcp radius rpc-bind samba
samba-client
smtp ssh telnet tftp tftp-client transmission-client vnc-server wbem-https
But what does 'samba' and 'samba-client' equal? What about
'kerberos'? Is 'kpasswd' == kerberos password?
See the challenge here?
So I have done SOME googling and have come up empty. I decided to try
here first, as Fedora users MAY have been working this out longer than
any other list I am active on. If no help here, I will join the
firewalld user list.
thanks