Mikaela/mikaela.github.io
1
0
Fork 0
mirror of https://github.com/mikaela/mikaela.github.io/ synced 2024-10-01 17:16:30 +02:00
Code Issues Projects Releases Wiki Activity

ufw: reject 113

Browse Source
This commit is contained in:
Aminda Suomalainen 2015-07-09 15:59:11 +03:00
parent 03b4b983b5
commit 8956a3dbea
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
_posts/2015-06-12-ufw.md
View File

@ -22,7 +22,7 @@ ufw default deny incoming
ufw default allow outgoing
systemctl enable ufw && systemctl start ufw
ufw enable
ufw allow 113
ufw reject 113
ufw allow 631
ufw allow 5060
ufw allow 5353/udp
@ -39,15 +39,10 @@ ufw allow 60000:61000/udp
* Start ufw on boot and now (I am not sure if this step is required, but
better safe than sorry).
* Put the firewall in force.
* 113/ident — Allow identd to be reached, probably all my hosts run it for
IRC.
* If some host doesn't run it use `ufw reject 113` so the IRC server
asking for your ident is replied "Connection refused" and the
connecting happens faster as you aren't force to wait for timeout.
* I am not sure if this is faster than running ident, but my
recommendation is to allow it if you run it and otherwise reject.
Deny forces you to wait for timeout as your firewall says
nothing.
* 113/ident — Tell "Connection refused" to whoever tries to reach port 113.
This makes ident checking IRC servers connect faster as they don't have
to timeout. If you run shell server (for IRC purpouses) you should allow
this instead.
* 631/cups — Allow access to cups for printer sharing
* 5060/sip — VoIP, in this case Linphone
* 5353/mdns/Avahi — used for `.local` addresses