Services questions

Robert Moskowitz rgm at htt-consult.com
Thu Aug 27 14:44:38 UTC 2015



On 08/27/2015 10:28 AM, Robert Moskowitz wrote:
> For the past year, I just kind of hacked along with small things with 
> firewalld.  But now I am configuring a Samba AD and that means lots of 
> rules.  See:
>
> https://wiki.samba.org/index.php/Samba_AD_DC_port_usage
>
> I am trying really hard to stay with firewalld services and only do 
> ports where I have to.
>
> So right away I see a few things:
>
> Why is the ldap service tcp only?
>
> # cat  /usr/lib/firewalld/services/ldap.xml
> <?xml version="1.0" encoding="utf-8"?>
> <service>
>   <short>LDAP</short>
>   <description>Lightweight Directory Access Protocol (LDAP) 
> server</description>
>   <port protocol="tcp" port="389"/>
> </service>
>
> Seems this should also include udp.
>
> Whereas mDNS is the flip.  It has udp, but should also include tcp.

Further checking on mDNS shows Avahi only listening on udp, so that one 
is not so much a concern.  Other than udp IS a defined protocol for mDNS.

>
> Both of these I CAN handle with add-port, but wonder if the service 
> rule is really set up wrong.  One would expect these two services to 
> be open for both ucp and tcp.  Not one or the other.
>
> Finally I am suppose to enable "Dynamic RPC ports" which is 1024 - 
> 5000 and I cannot find any guidance on setting that one up.
>
> Otherwise, an interesting service and one I am slooooowly learning.
>
> thanks
>
> _______________________________________________
> firewalld-users mailing list
> firewalld-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/firewalld-users



More information about the firewalld-users mailing list