Jan-Frode,

Thats a tough one :-).

80 obviously

21/23/25/81/8080....

A clear error on start up and description of how to resolve would be
useful I guess, but then I guess haproxy wouldn't know it was being
blocked by selinux policy?





2009/4/22 Jan-Frode Myklebust <[email protected]>
>
> I'm trying to write an selinux policy for haproxy that will be
> included in the upstream "refpolicy" project, and wonder what ports
> haproxy should be allowed to bind and connect to by default. I know
> it might need any port, and was thinking I could allow that by a
> flag that is default off:
>
>        haproxy_bindconnect_any = off
>
> but what would be the most common ports for haproxy, that should
> be default allow in the policy ? Is there a clear set of ports
> that haproxy is most commonly used for ?
>
>
>  -jf
>
>



--
Regards,

Malcolm Turnbull.

Loadbalancer.org Ltd.
Phone: +44 (0)870 443 8779
http://www.loadbalancer.org/

Reply via email to