|
@@ -442,13 +442,13 @@ function save_firewall_settings {
|
442
|
442
|
chmod +x /etc/network/if-up.d/iptables
|
443
|
443
|
}
|
444
|
444
|
|
445
|
|
-function configure_firewall_for_ftp {
|
446
|
|
- if grep -Fxq "configure_firewall_for_ftp" $COMPLETION_FILE; then
|
|
445
|
+function configure_firewall_ephemeral_ports {
|
|
446
|
+ if grep -Fxq "configure_firewall_ephemeral_ports" $COMPLETION_FILE; then
|
447
|
447
|
return
|
448
|
448
|
fi
|
449
|
|
- iptables -I INPUT -i eth0 -p tcp --dport 49152:65534 -j ACCEPT
|
|
449
|
+ iptables -I INPUT -i eth0 -p tcp --dport 32768:61000 -j ACCEPT
|
450
|
450
|
save_firewall_settings
|
451
|
|
- echo 'configure_firewall_for_ftp' >> $COMPLETION_FILE
|
|
451
|
+ echo 'configure_firewall_ephemeral_ports' >> $COMPLETION_FILE
|
452
|
452
|
}
|
453
|
453
|
|
454
|
454
|
function configure_firewall_for_web {
|
|
@@ -953,7 +953,7 @@ enable_zram
|
953
|
953
|
random_number_generator
|
954
|
954
|
configure_firewall
|
955
|
955
|
configure_firewall_for_web
|
956
|
|
-configure_firewall_for_ftp
|
|
956
|
+configure_firewall_ephemeral_ports
|
957
|
957
|
configure_firewall_for_git
|
958
|
958
|
configure_firewall_for_ssh
|
959
|
959
|
configure_firewall_for_email
|