Re[2]: [CentOS] Default Firewall Entries

-- Best regards, Mickael mailto:mike@kamloopsbc.com Monday, April 11, 2005, 3:22:49 AM, you wrote: JH> On Sun, 2005-04-10 at 20:24 -0700, Mickael Maddison wrote: JH> {snip} >> I'm curious... there seems to be a couple of default firewall rules >> that I'm not familiar with in the CentOS 4.0 JH> These are also present in RHEL-4 and FC-3 from RedHat :) JH> {snip} >> Particularly, the 5353 udp allowing from 224.0.0.251 and the 631 udp. >> Anyone know what these are for, and if they should be disabled? JH> The 5353 udp is multicast DNS (or mDNS for short) ... here are a couple JH> links: JH> http://files.multicastdns.org/draft-cheshire-dnsext-multicastdns.txt JH> http://www.multicastdns.org/ JH> The 631 udp port is for "Internet Printing Protocol". It is how cupsd JH> sees external printers. Here are some details: JH> http://mirror.centos.org/centos/4/docs/html/rhel-sag-en-4/s1-printing-sharin... JH> ------------------------------------------- JH> Also ... specifically from the RHEL-4 release notes: JH> "system-config-securitylevel JH> The firewall constructed by the system-config-securitylevel JH> configuration tool now allows CUPS and Multicast DNS (mDNS) browsing. JH> Note that, at the present time, these services cannot be disabled by JH> system-config-securitylevel." JH> ------------------------------------------- JH> SO ... if the box needs to do either mDNS or CUPS printer browsing, you JH> need them enabled. If not, you can remove them. JH> Thanks, JH> Johnny Hughes JH> __________ NOD32 1.1056 (20050411) Information __________ JH> This message was checked by NOD32 antivirus system. JH> http://www.nod32.com