Mikaela/mikaela.github.io
1
0
Fork 0
mirror of https://github.com/mikaela/mikaela.github.io/ synced 2024-11-26 14:29:24 +01:00
Code Issues Projects Releases Wiki Activity

ufw: reject 113

Browse Source
This commit is contained in:
Aminda Suomalainen 2015-07-09 15:59:11 +03:00
parent 03b4b983b5
commit 8956a3dbea
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
_posts/2015-06-12-ufw.md
View File

@ -22,7 +22,7 @@ ufw default deny incoming
ufw default allow outgoing ufw default allow outgoing
systemctl enable ufw && systemctl start ufw systemctl enable ufw && systemctl start ufw
ufw enable ufw enable
ufw allow 113 ufw reject 113
ufw allow 631 ufw allow 631
ufw allow 5060 ufw allow 5060
ufw allow 5353/udp ufw allow 5353/udp
@ -39,15 +39,10 @@ ufw allow 60000:61000/udp
* Start ufw on boot and now (I am not sure if this step is required, but * Start ufw on boot and now (I am not sure if this step is required, but
better safe than sorry). better safe than sorry).
* Put the firewall in force. * Put the firewall in force.
* 113/ident — Allow identd to be reached, probably all my hosts run it for * 113/ident — Tell "Connection refused" to whoever tries to reach port 113.
IRC. This makes ident checking IRC servers connect faster as they don't have
* If some host doesn't run it use `ufw reject 113` so the IRC server to timeout. If you run shell server (for IRC purpouses) you should allow
asking for your ident is replied "Connection refused" and the this instead.
connecting happens faster as you aren't force to wait for timeout.
* I am not sure if this is faster than running ident, but my
recommendation is to allow it if you run it and otherwise reject.
Deny forces you to wait for timeout as your firewall says
nothing.
* 631/cups — Allow access to cups for printer sharing * 631/cups — Allow access to cups for printer sharing
* 5060/sip — VoIP, in this case Linphone * 5060/sip — VoIP, in this case Linphone
* 5353/mdns/Avahi — used for `.local` addresses * 5353/mdns/Avahi — used for `.local` addresses