Allow munin from christmas-tree

[sql.git] / etc / sysconfig / iptables

diff --git a/etc/sysconfig/iptables b/etc/sysconfig/iptables
index 8d3ecfe3e63dec1ed934777dfc349be63f42eb58..8e4bbbef514912823804c7cc0b3de3fd4e4fa067 100644 (file)
--- a/etc/sysconfig/iptables
+++ b/etc/sysconfig/iptables
@@ -11,14 +11,21 @@
 -A Firewall -p 51 -j ACCEPT
 -A Firewall -p icmp --icmp-type any -j ACCEPT
 -A Firewall -m state --state RELATED,ESTABLISHED -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 18.181.0.52 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 192.168.181.47 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 192.168.181.56 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 4949 -s 18.187.1.128 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 5666 -s 18.187.1.128 -j ACCEPT 
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 22,80,443 -j ACCEPT 
+
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 3306,33306 -d 18.181.0.52 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 3306,33306 -d 172.21.0.52 -j ACCEPT
+
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 18.181.0.47 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 172.21.0.47 -j ACCEPT
+
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 18.181.0.56 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 172.21.0.56 -j ACCEPT
+
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 4949,5666 -s 18.181.0.65 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 4949,5666 -s 18.181.0.51 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 4949,5666 -s 18.187.1.128 -j ACCEPT
+
 -A Firewall -j REJECT --reject-with icmp-host-prohibited
 COMMIT
 # Completed on Wed Aug 29 23:33:53 2007