From fc2db16120663a3dcdc72903ce33bc29b7a4a8b1 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Mon, 29 Mar 2021 15:20:00 -0700 Subject: [PATCH] iptables / kojibuilder: add some more ports needed by ipa-clients Signed-off-by: Kevin Fenzi --- roles/base/templates/iptables/iptables.kojibuilder | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder index 6c2136eee0..3281f8de18 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -80,6 +80,13 @@ -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT # ipa client ports + +-A OUTPUT -p tcp -m tcp -d 10.3.163.54 --dport 80 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.55 --dport 80 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.104 --dport 80 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.54 --dport 443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.55 --dport 443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.104 --dport 443 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.54 --dport 389 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.55 --dport 389 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.104 --dport 389 -j ACCEPT @@ -98,6 +105,9 @@ -A OUTPUT -p udp -m udp -d 10.3.163.54 --dport 464 -j ACCEPT -A OUTPUT -p udp -m udp -d 10.3.163.55 --dport 464 -j ACCEPT -A OUTPUT -p udp -m udp -d 10.3.163.104 --dport 464 -j ACCEPT +-A OUTPUT -p udp -m udp -d 10.3.163.54 --dport 53 -j ACCEPT +-A OUTPUT -p udp -m udp -d 10.3.163.55 --dport 53 -j ACCEPT +-A OUTPUT -p udp -m udp -d 10.3.163.104 --dport 53 -j ACCEPT #nfs to vtap-fedora-nfs01.storage.phx2.redhat.com - a little to wide-open - but # kinda necessary