[Bug 839292] default behavior of iptables rules generator creates security hole

https://bugzilla.novell.com/show_bug.cgi?id=839292 https://bugzilla.novell.com/show_bug.cgi?id=839292#c6 --- Comment #6 from Marcus Meissner 2013-11-04 13:21:03 UTC --- Does using the SIP connection tracking module help perhaps? How did you open the port to the outside? add to the FW_LOAD_MODULES line: FW_LOAD_MODULES="nf_conntrack_netbios_ns nf_conntrack_sip" That one parses the packets flowing in and out and might managed the ESTABLISHED rule better. (But this is just guessing, i am bit in over my head here) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.