diff options
| author | Simon Rettberg | 2016-09-09 15:37:39 +0200 |
|---|---|---|
| committer | Simon Rettberg | 2016-09-09 15:37:39 +0200 |
| commit | 6c1cbb8e124a2a98b3144b822c6979ab171e2fd3 (patch) | |
| tree | 7dee12ce7b01093bb420ecec1bdc9addb8eddd87 | |
| parent | [pam-bwidm] Generate random ID so consecutive logins don't fail (diff) | |
| download | tm-scripts-6c1cbb8e124a2a98b3144b822c6979ab171e2fd3.tar.gz tm-scripts-6c1cbb8e124a2a98b3144b822c6979ab171e2fd3.tar.xz tm-scripts-6c1cbb8e124a2a98b3144b822c6979ab171e2fd3.zip | |
[pvs2] Add iptables-helper file so pvs still works when a lecture uses firewalling
| -rwxr-xr-x | remote/modules/pvs2/data/opt/openslx/iptables/rules.d/10-pvs | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/remote/modules/pvs2/data/opt/openslx/iptables/rules.d/10-pvs b/remote/modules/pvs2/data/opt/openslx/iptables/rules.d/10-pvs new file mode 100755 index 00000000..a24491fa --- /dev/null +++ b/remote/modules/pvs2/data/opt/openslx/iptables/rules.d/10-pvs @@ -0,0 +1,11 @@ +#!/bin/ash + +# Allow PVS ports +# Control connection - server and client perspective +iptables -I ipt-helper-INPUT 1 -i br0 -p tcp --dport 5194 -j ACCEPT +iptables -I ipt-helper-OUTPUT 1 -o br0 -p tcp --dport 5194 -j ACCEPT +# UDP discovery - server and client perspective +iptables -I ipt-helper-INPUT 1 -i br0 -p udp --dport 3492 -j ACCEPT +iptables -I ipt-helper-OUTPUT 1 -o br0 -p udp --dport 3492 -j ACCEPT +# VNC connection - incoming (client) only - small range as we use -autoport +iptables -I ipt-helper-INPUT 1 -i br0 -p tcp --dport 54112:54122 -j ACCEPT |