Browse Source

kvmhost02: allow web01 ldap access to auth01

Maximilian Ronniger 3 năm trước cách đây
mục cha
commit
096e2a7df4
1 tập tin đã thay đổi với 3 bổ sung11 xóa
  1. 3 11
      itguru.at.fwb

+ 3 - 11
itguru.at.fwb

@@ -2443,7 +2443,7 @@
       <ServiceGroup id="id1599X5690" name="TagServices" comment="" ro="False"/>
     </ServiceGroup>
     <ObjectGroup id="id1600X5690" name="Firewalls" comment="" ro="False">
-      <Firewall id="id8899X28426" host_OS="linux317" inactive="False" lastCompiled="1630064791" lastInstalled="1630064806" lastModified="1630064786" platform="iptables" version="1.4.20" name="kvmhost02" comment="" ro="False">
+      <Firewall id="id8899X28426" host_OS="linux317" inactive="False" lastCompiled="1646664610" lastInstalled="1646664630" lastModified="1646664598" platform="iptables" version="1.4.20" name="kvmhost02" comment="" ro="False">
         <NAT id="id13393X65696" name="NAT" comment="" ro="False" ipv4_rule_set="True" ipv6_rule_set="False" top_rule_set="True">
           <NATRule id="id13395X65696" disabled="False" group="outgoing NAT" position="0" action="Translate" comment="NAT all outgoing mail traffic to mail IP">
             <OSrc neg="False">
@@ -3620,6 +3620,7 @@
             <Src neg="False">
               <ObjectRef ref="id8526X5690"/>
               <ObjectRef ref="id4382X2427"/>
+              <ObjectRef ref="id6626X5690"/>
             </Src>
             <Dst neg="False">
               <ObjectRef ref="id10415X5690"/>
@@ -4132,16 +4133,7 @@
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"># BEGIN INIT INFO
-Provides:          firewall
-Required-Start:    $all
-Required-Stop:
-Default-Start:     2 3 4 5
-Default-Stop:
-Short-Description: Run firewall if it exist
-# END INIT INFO
-
-# fix network interface
+          <Option name="prolog_script"># fix network interface
 /sbin/ethtool -K enp0s31f6 tso off
 
 </Option>