Good morning Francisco J. Badaró Valente Neto, what services do you offer? Only http and https? If you also offer rsync or ftp, those ports need to be open too. As far I know there is no need for other open ports. Keep in mind that you also use rsync to stay in sync. So the outgoing request to the server you sync from and the answer of this server need to pass the firewall. Greetings from Germany Lukas Sent from my samsung smart fridge. Francisco Badaró <francisco at itsbrasil.net> schrieb am Di., 21. Jan. 2020, 02:41: > Hello Centos community, > > One question, in relation to security in mirror centos: > > - Can I apply a default drop firewall , accept policy for only a few ports? > > Accept only ports: > > TCP/UDP Port 80 (http) > TCP Port 443 (https) > > Are there any restrictions on the part of the CENTOS community for the > application of firewall policy for the mirror host? > > Have another Port to open in firewall ? > > Best Regards, > ------ > Francisco J. Badaró Valente Neto > Gerente de Telecomunicações e Treinamento > ITS BRASIL > Chave Pública PGP: 3C0197DADD86E00869A1F3ABEED24941A5292F14 > Tel.: + 55 71 34020870 > Cel: +55 71 981717310 > _______________________________________________ > CentOS-mirror mailing list > CentOS-mirror at centos.org > https://lists.centos.org/mailman/listinfo/centos-mirror > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20200121/da0b6482/attachment-0005.html>