mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2024-11-22 12:09:28 +01:00
blog/ufw: add port 123/NTP
This commit is contained in:
parent
2704d92543
commit
4ba73b5498
@ -39,6 +39,8 @@ ufw default allow outgoing
|
||||
systemctl enable ufw && systemctl start ufw
|
||||
ufw enable
|
||||
ufw reject 113/tcp
|
||||
#ufw allow from 192.168.0.0/16 to any port 123 proto udp
|
||||
ufw allow from fe80::/10 to any port 123 proto udp
|
||||
#ufw allow from 192.168.8.0/24 to any port 631 proto tcp
|
||||
ufw allow from fe80::/10 to any port 631
|
||||
#ufw allow from 192.168.8.0/24 to any port 5353 proto udp
|
||||
@ -64,6 +66,7 @@ ufw allow 60000:61000/udp
|
||||
allow this instead. And if you don't use IRC or don't care about having
|
||||
to wait for the check to timeout, don't do this as you may leave
|
||||
yourself visible to random port scanners.
|
||||
* 123 UDP/NTP - syncing time between local hosts
|
||||
* 631 both/cups — Allow access to cups for printer sharing from 192.168.8.xxx
|
||||
* fe80:://10 is link-local address existing _everywhere_ IPv6 is enabled,
|
||||
check your `ip addr` or on Windows `ipconfig /all` for fun.
|
||||
|
Loading…
Reference in New Issue
Block a user