blog/ufw: add port 123/NTP

This commit is contained in:
Aminda Suomalainen 2020-10-26 07:31:09 +02:00
parent 2704d92543
commit 4ba73b5498
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723

View File

@ -39,6 +39,8 @@ ufw default allow outgoing
systemctl enable ufw && systemctl start ufw
ufw enable
ufw reject 113/tcp
#ufw allow from 192.168.0.0/16 to any port 123 proto udp
ufw allow from fe80::/10 to any port 123 proto udp
#ufw allow from 192.168.8.0/24 to any port 631 proto tcp
ufw allow from fe80::/10 to any port 631
#ufw allow from 192.168.8.0/24 to any port 5353 proto udp
@ -64,6 +66,7 @@ ufw allow 60000:61000/udp
allow this instead. And if you don't use IRC or don't care about having
to wait for the check to timeout, don't do this as you may leave
yourself visible to random port scanners.
* 123 UDP/NTP - syncing time between local hosts
* 631 both/cups — Allow access to cups for printer sharing from 192.168.8.xxx
* fe80:://10 is link-local address existing _everywhere_ IPv6 is enabled,
check your `ip addr` or on Windows `ipconfig /all` for fun.