On 08/27/2015 08:37 AM, Robert
Moskowitz wrote:
Over on the Samba list, I am trying to figure out what firewalld
services I need opened for all the things that a Samba AD does. I
could 'simply' take the list of iptables entries others have used
and add those ports, but I really WANT to learn about firewalld
and what its 'services' do. per: https://fedoraproject.org/wiki/FirewallD
I was pointed to:
/usr/lib/firewalld/services
And you can define more. As I learned reading:
http://www.certdepot.net/rhel7-get-started-firewalld/
Services
A service can be a list of local ports and destinations and
additionally also a list of firewall helper modules
automatically loaded if a service is enabled. The use of
predefined services makes it easier for the user to enable and
disable access to a service. Service configuration options and
generic file information are described in the
firewalld.service(5) man page.
And that manpage does not tell me what the services are and what
they map to. It is easy to learn the list of supported services:
firewall-cmd --get-services
RH-Satellite-6 amanda-client bacula bacula-client dhcp dhcpv6
dhcpv6-client dns
ftp high-availability http https imaps ipp ipp-client ipsec
kerberos kpasswd ldap
ldaps libvirt libvirt-tls mdns mountd ms-wbt mysql nfs ntp openvpn
pmcd pmproxy
pmwebapi pmwebapis pop3s postgresql proxy-dhcp radius rpc-bind
samba samba-client
smtp ssh telnet tftp tftp-client transmission-client vnc-server
wbem-https
But what does 'samba' and 'samba-client' equal? What about
'kerberos'? Is 'kpasswd' == kerberos password?
See the challenge here?
So I have done SOME googling and have come up empty. I decided to
try here first, as Fedora users MAY have been working this out
longer than any other list I am active on. If no help here, I
will join the firewalld user list.
thanks
|
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
