Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package hylafax+ for openSUSE:Factory 
checked in at 2021-10-23 00:51:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/hylafax+ (Old)
 and      /work/SRC/openSUSE:Factory/.hylafax+.new.1890 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "hylafax+"

Sat Oct 23 00:51:08 2021 rev:40 rq:926842 version:7.0.4

Changes:
--------
--- /work/SRC/openSUSE:Factory/hylafax+/hylafax+.changes        2021-10-19 
23:04:17.081285408 +0200
+++ /work/SRC/openSUSE:Factory/.hylafax+.new.1890/hylafax+.changes      
2021-10-23 00:51:47.237142806 +0200
@@ -51,0 +52,6 @@
+Mon Jul 12 17:49:35 UTC 2021 - Hans-Peter Jansen <[email protected]>
+
+- Add hylafax service and helper for use with firewalld, and
+  explain the details in README.SUSE.
+
+-------------------------------------------------------------------

New:
----
  hylafax-helper.xml
  hylafax-service.xml

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ hylafax+.spec ++++++
--- /var/tmp/diff_new_pack.UeRnkS/_old  2021-10-23 00:51:48.373143308 +0200
+++ /var/tmp/diff_new_pack.UeRnkS/_new  2021-10-23 00:51:48.377143310 +0200
@@ -38,8 +38,11 @@
 Source12:       hylafax-faxqclean.timer
 Source13:       hylafax-faxqclean.service
 Source14:       [email protected]
+Source15:       hylafax-service.xml
+Source16:       hylafax-helper.xml
 Patch0:         hylafax.diff
 
+BuildRequires:  firewalld
 BuildRequires:  gcc-c++
 BuildRequires:  ghostscript
 BuildRequires:  libjbig-devel
@@ -178,6 +181,8 @@
 install -D -m 0644 %{SOURCE12} %{buildroot}%{_unitdir}/hylafax-faxqclean.timer
 install -D -m 0644 %{SOURCE13} 
%{buildroot}%{_unitdir}/hylafax-faxqclean.service
 install -D -m 0644 %{SOURCE14} 
%{buildroot}%{_unitdir}/[email protected]
+install -D -m 0644 %{SOURCE15} 
%{buildroot}%{_prefix}/lib/firewalld/services/hylafax.xml
+install -D -m 0644 %{SOURCE16} 
%{buildroot}%{_prefix}/lib/firewalld/helpers/hylafax.xml
 
 for lnk in hylafax-hfaxd hylafax-faxq; do
     ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc$lnk
@@ -221,6 +226,8 @@
 %{_unitdir}/hylafax-faxqclean.timer
 %{_unitdir}/[email protected]
 %{_unitdir}/hylafax-faxqclean.service
+%{_prefix}/lib/firewalld/services/hylafax.xml
+%{_prefix}/lib/firewalld/helpers/hylafax.xml
 %{_sbindir}/rchylafax-faxq
 %{_sbindir}/rchylafax-hfaxd
 %{_sbindir}/rchylafax

++++++ README.openSUSE ++++++
--- /var/tmp/diff_new_pack.UeRnkS/_old  2021-10-23 00:51:48.413143326 +0200
+++ /var/tmp/diff_new_pack.UeRnkS/_new  2021-10-23 00:51:48.413143326 +0200
@@ -4,39 +4,47 @@
 should only be installed in isolated environments for security reasons,
 allowing direct access for admins only. [bsc#1173519]
 
+
 Setup of hylafax+ on openSUSE
 -----------------------------
 
 After installation of hylafax you need to run 
+
 faxsetup
+
 answer the questions and modify to your needs.
 
 Run 
+
 faxaddmodem
+
 for each attached modem. It asks you for the device, leave out the /dev 
prefix; 
-only enter eg. modem, ttyS0 or such things. 
-Answer the other questions, important ones could be the ringtones, max pages, 
-permissions on files or your the name that should be shown. 
+only enter eg. modem, ttyS0 or similar device names. 
+Answer the questions, important ones are related to ringtones, max pages, 
+permissions on files or the name that should be shown on the tagline of send 
faxes. 
+
 
 Setting up hylafax for systemd
 ------------------------------
 
-hylafax comes with three systemd service files. The first two are needed when 
-you want to send faxes from your server:
+hylafax comes with a couple of systemd services. Two of them are needed to send
+out faxes from your server:
 
 hylafax-hfaxd.service - the hylafax server
 hylafax-faxq.service - the fax scheduler
 
-Enable systemd service for the daemons. They will start at boot time:
+Enable these services with 
 
 systemctl enable hylafax-hfaxd.service
 systemctl enable hylafax-faxq.service
 
+They will be started at boot time.
+
 
 systemd-timers
 --------------
 
-openSUSE has moved from cron to systemd-timers. By default we ship 2 timers, 
+openSUSE has moved from cron to systemd-timers. By default we ship two timers, 
 for cleaning the faxqueue and for usage statistics. You need to enable them in 
 case you want to make use of these features:
 
@@ -47,23 +55,55 @@
 Receiving faxes
 ---------------
 
-In order to receive faxes as well, you need to run one faxgetty for each 
+In order to receive faxes, you need to additinally run one faxgetty for each 
 interface, e.g.:
 
 systemctl start [email protected]
 systemctl start [email protected]
 
-Starting them at boot time with:
+Enable them at boot time with:
 
 systemctl enable [email protected]
 systemctl enable [email protected]
 
 
+Setting up firewalld
+--------------------
+The server package installs a ready to use hylafax service and helper file.
+For the simple case, you need to:
+
+firewall-cmd --add-service hylafax
+
+Please note, that the client tools faxstat and sendfax use a protocol similar
+to FTP to transfer payload data. As long, as you don't mix hylafax with a ftp
+server service, you're almost set at this point, and we would strongly advise
+against such a setup! At least, it requires you to combine the ftp and hylafax
+services and helpers into a single service and helper in /etc/firewalld, 
because
+both use the same kernel helper module "nf_conntrack_ftp". Again, YMMV.
+
+Additionally on the *clients*, you should switch the hylafax protocol to 
passive mode:
+
+cat >> /etc/hylafax/hyla.conf << EOF
+PassiveMode:    yes
+EOF
+
+After successfully checking the connection from the client with:
+
+faxstat -hfaxserver -s 
+
+you can persist the firewalld settings with:
+
+firewall-cmd --add-service hylafax --permanent
+
+
 Send-only environment
 ---------------------
 
-Many installations run hylafax just for sending faxes. To get this up and 
running, the command 
+Many installations run hylafax just for sending faxes. To get this up and
+running, the command 
+
 faxmodem
+
 needs to run after hylafax is started.
 For this we have created a separate service, [email protected]
 
@@ -74,8 +114,8 @@
 Create a directory
 /etc/systemd/system/hylafax-faxq.service.d
 and copy the file sendonly.conf into this directory.
-Check that the mentioned port (ttyS0 - Parameter is the device the modem is 
attached 
-to) in this file matches your configuration and restart the service.
+Check that the mentioned port (ttyS0 - Parameter is the modem device) in this
+file matches your configuration and restart the service.
 Depending on how fast the FIFO comes up, you may see a restart of the service)
 
 For general documentation on how to set up hylafax, please see

++++++ hylafax-helper.xml ++++++
<?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_ftp">
  <port protocol="tcp" port="4559"/>
</helper>
++++++ hylafax-service.xml ++++++
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>HylaFAX</short>
  <description>HylaFAX uses a protocol similar to FTP to open passive 
connections</description>
  <port protocol="tcp" port="4559"/>
  <helper name="hylafax"/>
</service>

Reply via email to