changed backend firewall rules

[sql.git] / etc / sysconfig / iptables

diff --git a/etc/sysconfig/iptables b/etc/sysconfig/iptables
index 8d3ecfe3e63dec1ed934777dfc349be63f42eb58..08d1b9b9d99b1f89e90a1a2b6f7ee06474b7c2da 100644 (file)
--- a/etc/sysconfig/iptables
+++ b/etc/sysconfig/iptables
@@ -15,8 +15,11 @@
 -A Firewall -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT 
 -A Firewall -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT 
 -A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 18.181.0.52 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 192.168.181.47 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 192.168.181.56 -j ACCEPT 
+-A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 18.181.0.47 -j ACCEPT 
+-A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 18.181.0.56 -j ACCEPT 
+-A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 172.21.0.52 -j ACCEPT 
+-A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 172.21.0.47 -j ACCEPT 
+-A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 172.21.0.56 -j ACCEPT 
 -A Firewall -m state --state NEW -m tcp -p tcp --dport 4949 -s 18.187.1.128 -j ACCEPT 
 -A Firewall -m state --state NEW -m tcp -p tcp --dport 5666 -s 18.187.1.128 -j ACCEPT 
 -A Firewall -j REJECT --reject-with icmp-host-prohibited