Re: [Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-27 Thread nxvl
That's what is happening here, the profile Postfix it's what is being enable, you also have Postfix Secure which is configured but not being used, the idea of that is that i don't need to configure the rules by port, but by service. On Wed, 2008-08-27 at 09:45 +, Scott Kitterman wrote: If a

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-27 Thread Jamie Strandboge
Package integration for ufw was discussed in UDS Prague, and you can read about ufw's application integration in https://wiki.ubuntu.com/UbuntuFirewall. The basic idea is this: 1. a package declares profiles to ufw by putting them in a file in /etc/ufw/applications.d (*). There should only be a

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-27 Thread Jamie Strandboge
well, /etc/firewall.d is being used somewhere else, so I'll need to think about this more. -- Please add UFW profile integration with postfix https://bugs.launchpad.net/bugs/261698 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to postfix

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-27 Thread Scott Kitterman
Title for Port 587 should be Submission. I understand all that (I think). I'm arguing that having the profile open ports that may or may not be in use (neither 465 nor 587 are enabled by default) is not optimal. I think this should just open port 25. -- Please add UFW profile integration with

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-27 Thread Jamie Strandboge
I have made some changes to ufw that has it use dpkg triggers. This means that for now there is no default profile and nothing will be opened (even if DEFAULT_APPLICATION_POLICY is set to something other than skip). I'll make the change for Submission and adjust the debdiff accordingly for the

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-27 Thread Jamie Strandboge
Uploaded updated package that takes advantage of dpkg triggers. Thanks Nicolas! ** Changed in: postfix (Ubuntu) Status: Triaged = Fix Committed -- Please add UFW profile integration with postfix https://bugs.launchpad.net/bugs/261698 You received this bug notification because you are a

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-26 Thread nxvl
** Attachment added: postfix_2.5.4-1ubuntu2.debdiff http://launchpadlibrarian.net/17105701/postfix_2.5.4-1ubuntu2.debdiff ** Changed in: postfix (Ubuntu) Status: New = Confirmed -- Please add UFW profile integration with postfix https://bugs.launchpad.net/bugs/261698 You received

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-26 Thread Scott Kitterman
Port 587 is far more important than 465, but a bigger question is that port opening is really a function of Postfix config. If smtps is not configured, then there's no reason to open 465 (that's actually officially assigned to another protocol). ** Changed in: postfix (Ubuntu) Status:

[Bug 261698] Re: Please add UFW profile integration with postfix

2008-08-26 Thread nxvl
That's why that profile is not loaded by default, just added for enabling it by hand when user want's to, the default profile is Postfix, which allows port 25, because that's the default opened port in an out-of-the-box instalation. Port number for TLS was taken from