config fixes

[sql.git] / etc / sysconfig / iptables

diff --git a/etc/sysconfig/iptables b/etc/sysconfig/iptables
index 08d1b9b9d99b1f89e90a1a2b6f7ee06474b7c2da..c58ec03e152b141c9f89f604981708805e96041a 100644 (file)
--- a/etc/sysconfig/iptables
+++ b/etc/sysconfig/iptables
@@ -11,17 +11,20 @@
 -A Firewall -p 51 -j ACCEPT
 -A Firewall -p icmp --icmp-type any -j ACCEPT
 -A Firewall -m state --state RELATED,ESTABLISHED -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 18.181.0.52 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 18.181.0.47 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 18.181.0.56 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -d 172.21.0.52 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 172.21.0.47 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 3306 -s 172.21.0.56 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 4949 -s 18.187.1.128 -j ACCEPT 
--A Firewall -m state --state NEW -m tcp -p tcp --dport 5666 -s 18.187.1.128 -j ACCEPT 
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 22,80,443 -j ACCEPT 
+
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 3306,33306 -d 18.181.0.52 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 3306,33306 -d 172.21.0.52 -j ACCEPT
+
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 18.181.0.47 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 172.21.0.47 -j ACCEPT
+
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 18.181.0.56 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp --dport 3306 -s 172.21.0.56 -j ACCEPT
+
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 4949,5666 -s 18.181.0.65 -j ACCEPT
+-A Firewall -m state --state NEW -p tcp -m multiport --dports 4949,5666 -s 18.187.1.128 -j ACCEPT
+
 -A Firewall -j REJECT --reject-with icmp-host-prohibited
 COMMIT
 # Completed on Wed Aug 29 23:33:53 2007