https://bugs.contribs.org/show_bug.cgi?id=10760
--- Comment #13 from Jean-Philippe Pialasse <[email protected]> ---
(In reply to mab974 from comment #12)
> Created attachment 6188 [details]
> patch for 'per service ban' of smeserver-xt_geoip
>
> committed on cvs repo, not still built.
>
> many changes to be tested.
clever approach to allow more than the selected services I proposed.
I wait to see how you verify the service.
the idea here was just to either block complete access as in initial version,
or to only give access to selective country for some services.
i do not see the need to add -m multiport ! --dports $locPorts to make some
exceptions
I would say, if the general rule prevent a country to access a specific
service, I want it to apply: better to be be more restrictive there, than
making holes. Security first.
--
You are receiving this mail because:
You are the QA Contact for the bug.
_______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/
