[Kimchi-devel] [PATCH] Firewall: Adding WebSocket port in firewall rules

[Aline Manera]

Reviewed-by: Aline Manera <alinefm at linux.vnet.ibm.com>

On 02/06/2014 04:22 PM, Paulo Vital wrote:
> Added port 64667 into src/firewalld.xml to attend Debian/Ubuntu, RHEL7+ and Fedora.
> Also added iptables rules to attend RHEL6 into contrib/kimchi.spec.fedora.in
>
> Signed-off-by: Paulo Vital <pvital at linux.vnet.ibm.com>
> ---
>   contrib/kimchi.spec.fedora.in | 2 ++
>   src/firewalld.xml             | 1 +
>   2 files changed, 3 insertions(+)
>
> diff --git a/contrib/kimchi.spec.fedora.in b/contrib/kimchi.spec.fedora.in
> index 2e36d5c..5140c5e 100644
> --- a/contrib/kimchi.spec.fedora.in
> +++ b/contrib/kimchi.spec.fedora.in
> @@ -104,6 +104,7 @@ firewall-cmd --add-service kimchid >/dev/null 2>&1
>   # Add default iptable rules to open 8000 and 8001 port
>   iptables -I INPUT -p tcp --dport 8000 -j ACCEPT
>   iptables -I INPUT -p tcp --dport 8001 -j ACCEPT
> +iptables -I INPUT -p tcp --dport 64667 -j ACCEPT
>   service iptables save >/dev/null 2>&1
>   %endif
>
> @@ -118,6 +119,7 @@ if [ $1 -eq 0 ] ; then
>       %else
>           iptables -D INPUT -p tcp --dport 8000 -j ACCEPT || :
>           iptables -D INPUT -p tcp --dport 8001 -j ACCEPT || :
> +        iptables -D INPUT -p tcp --dport 64667 -j ACCEPT || :
>       %endif
>   fi
>
> diff --git a/src/firewalld.xml b/src/firewalld.xml
> index 7472e20..03e1510 100644
> --- a/src/firewalld.xml
> +++ b/src/firewalld.xml
> @@ -4,4 +4,5 @@
>     <description>Kimchid is a daemon service for kimchi which is a HTML5 based management tool for KVM. It is designed to make it as easy as possible to get started with KVM and create your first guest.</description>
>     <port protocol="tcp" port="8000"/>
>     <port protocol="tcp" port="8001"/>
> +  <port protocol="tcp" port="64667"/>
>   </service>