Iptables defaults to accept input?

Matt Zimmerman mdz at canonical.com
Mon Sep 20 19:44:42 UTC 2004


On Mon, Sep 20, 2004 at 08:52:09PM +0200, Martin Pitt wrote:

> On 2004-09-20 11:39 -0700, Matt Zimmerman wrote:
> > There is only one open port in a default Ubuntu installation, and it is
> > assumed that if you install servers on top of that, you want the network to
> > be able to reach them.
> 
> Can we close the portmap port with your patch as well? Would be really
> nice :-)

Read my comments in the bug about why this didn't happen already.

https://bugzilla.ubuntu.com/show_bug.cgi?id=505

Someone needs to _thoroughly_ test that this won't break things like FAM,
NFS client support, etc. in unexpected ways, and probably provide
documentation or a script to enable public portmap when it is required.

Please move further discussion to ubuntu-devel...

-- 
 - mdz




More information about the ubuntu-users mailing list