I’m working on urbackup-server (quite soon we will have something to play with) and I need to open port in the firewall, but my issue is that I need 4 ports and with not necessary the same permissions
The Server binds to following default ports:
Port Usage Incoming/Outgoing
55413 FastCGI for web interface Incoming
55414 HTTP web interface Incoming
55415 Internet clients Incoming
35623 UDP broadcasts for discovery Outgoing
Of course the easy solution is to create several network services, even with the status disabled if it doesn’t concern the main service, but I need to create 3 services
service a TCPPorts 55414,55413 status enabled access none (restricted to the localhost since I have a reverse proxy) service b TCPPort 55415 status disabled access public (Internet client) service c UDPPort 35623 status disabled access private (used to discover client, restricted to the local network)
My concern is that it is a mess to see, mainly in the service dashboard tab, when you watch a service stopped and disabled, it will attract your attention.
the other solution could be to create manually fwservice and fwrules properties in the rpm, I have had a quick look however it is not my speciality and also I don’t want to break specific rules added by the sysadmin
So if you have ideas on the best way to do it, or tips, please shoot.
We had a similar issue in the past with an internal package.
To workaround the issue we created only one network service (eg. the public one on port 55415), and various fragments for /etc/shorewall/rules to open/close specific ports (eg. 55414,55413) which do not need to be modified by users.
What do you think? Do you need a couple of examples for the fragments inside shorewall?