-----BEGIN PGP SIGNED MESSAGE----- Hi Piet!
FW_SERVICES_EXT_TCP="www"
That's about the same as FW_SERVICES_EXT_TCP="http". ;-)
See /etc/services:
http 80/tcp # World Wide Web HTTP
www 80/tcp # World Wide Web HTTP
www-http 80/tcp # World Wide Web HTTP
So you're allowing outside access to your WWW server, whether it's
running or not. If you want to DROP packets when Apache is not
active, you need to find a way to modify the config file (remove the
www from the line above) and reload the firewall rules.
Regards, Andy
- --
Andreas J. Mueller email: