On Tue, Jun 23, 2009 at 03:08:23PM +0200, Alexander Wilms wrote:

The same thing I wrote about the OSPF macro applies to the BGP macro
as well. tcp/2605 is the management interface, not the BGP protocol,
and should not be included. In 99% of cases you absolutely don't want
to accept management access from your (e)BGP peers.

Andreas
-- 
Andreas Ferber           | MarcanT Internet-Services GmbH
Systemadministration     | Ravensberger Str. 10G, D-33602 Bielefeld
[email protected]      | Geschaeftsfuehrer: Thorsten Hojas
USt-ID Nr.: DE 190203238 | Handelsregister: Amtsgericht Bielefeld, HRB 35 827

------------------------------------------------------------------------------
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to