Tc @ s5 d d k l Z d d k l Z l Z d d d YZ e d e d d g e d d
d g e d e d
d d g e d e d e d d g e d d
d g d h d d 6d d 6e d e d d d d g e d d
d g e d e d d g e d" d
d# g e d$ e d% d g e d' e d( e d) d g e d+ d, d- g e d. e d/ d g e d1 e d2 e d3 d g e d5 e d6 e d7 d g e d9 e d: e d; d d g e d> d, d? g d
d g e d@ e dA d d d d g e dD d, d? g e dE e dF d d g e dH e dI e dJ d g e dL e dM e dN d g e dP e dQ e dR d d g e dU e dV e dW d g e dY e dZ e d[ d g e d] d, d^ g e d_ e d` g e da d, d^ g e db e dc d d d d g e dh e di e dj d g e dl d, dm g e dn e do d g e dq e dr e ds d d d g e dv e dw e dx d g e dz e d{ e d| d g e d~ g Z d Z d Z d Z
d S( i( t _( t getPortIDt getServiceNamet _Servicec B s e Z d g h d d Z RS( c C sC | | _ | | _ | | _ | | _ | | _ | | _ | | _ d S( N( t keyt namet portst descriptiont modulest destinationt default( t selfR R R R R R R
( ( s0 /usr/share/system-config-firewall/fw_services.pyt __init__ s N( t __name__t
__module__t NoneR ( ( ( s0 /usr/share/system-config-firewall/fw_services.pyR s s
ipp-clients Network Printing Client (IPP)t 631t udps The Internet Printing Protocol (IPP) is used for distributed printing. IPP (over udp) provides the ability to get information about a printer (e.g. capability and status) and to control printer jobs. If you plan to use a remote network printer via cups, do not disable this option.R
t desktopt ipps Network Printing Server (IPP)t tcps The Internet Printing Protocol (IPP) is used for distributed printing. IPP (over tcp) provides the ability to share printers over the network. Enable this option if you plan to share printers via cups over the network.t mdnss Multicast DNS (mDNS)t 5353s mDNS provides the ability to use DNS programming interfaces, packet formats and operating semantics in a small network without a conventional DNS server. If you plan to use Avahi, do not disable this option.R s 224.0.0.251t ipv4s ff02::fbt ipv6t ipsect IPsect aht espi s/ Internet Protocol Security (IPsec) incorporates security for network transmissions directly into the Internet Protocol (IP). IPsec provides methods for both encrypting data and authentication for the host or network it sends to. If you plan to use a vpnc server or FreeS/WAN, do not disable this option.t ssht SSHt 22s= Secure Shell (SSH) is a protocol for logging into and executing commands on remote machines. It provides secure encrypted communications. If you plan on accessing your machine remotely via SSH over a firewalled interface, enable this option. You need the openssh-server package installed for this option to be useful.t servert https
WWW (HTTP)t 80s HTTP is the protocol used to serve Web pages. If you plan to make your Web server publicly available, enable this option. This option is not required for viewing pages locally or developing Web pages.t ftpt FTPt 21s FTP is a protocol used for remote file transfer. If you plan to make your FTP server publicly available, enable this option. You need the vsftpd package installed for this option to be useful.R t nf_conntrack_ftpt nfst NFS4t 2049s The NFS4 protocol is used to share files via TCP networking. You will need to have the NFS tools installed and properly configure your NFS server for this option to be useful.t httpss Secure WWW (HTTPS)t 443s HTTPS is a modified HTTP used to serve Web pages when security is important. Examples are sites that require logins like stores or web mail. This option is not required for viewing pages locally or developing Web pages. You need the httpd package installed for this option to be useful.t smtps Mail (SMTP)t 25s This option allows incoming SMTP mail delivery. If you need to allow remote hosts to connect directly to your machine to deliver mail, enable this option. You do not need to enable this if you collect your mail from your ISP's server by POP3 or IMAP, or if you use a tool such as fetchmail. Note that an improperly configured SMTP server can allow remote machines to use your server to send spam.s samba-clients Samba Clientt 137t 138s This option allows you to access Windows file and printer sharing networks. You need the samba-client package installed for this option to be useful.t nf_conntrack_netbios_nst sambat Sambat 139t 445s This option allows you to access and participate in Windows file and printer sharing networks. You need the samba package installed for this option to be useful.t dnst DNSt 53s The Domain Name System (DNS) is used to provide and request host and domain names. Enable this option, if you plan to provide a domain name service (e.g. with bind).t imapss
IMAP over SSLt 993s The Internet Message Access Protocol over SSL (IMAPs) allows a local client to access email on a remote server in a secure way. If you plan to provide a IMAP over SSL service (e.g. with dovecot), enable this option.t pop3ss POP-3 over SSLt 995s The Post Office Protocol version 3 (POP3) is a protocol to retrieve email from a remote server over a TCP/IP connection. Enable this option, if you plan to provide a POP3 service (e.g. with dovecot).t radiust RADIUSt 1812t 1813s The Remote Authentication Dial In User Service (RADIUS) is a protocol for user authentication over networks. It is mostly used for modem, DSL or wireless user authentication. If you plan to provide a RADIUS service (e.g. with freeradius), enable this option.t openvpnt OpenVPNt 1194s OpenVPN is a virtual private network (VPN) solution. It is used to create encrypted point-to-point tunnels between computers. If you plan to provide a VPN service, enable this option.t tftpt TFTPt 69s The Trivial File Transfer Protocol (TFTP) is a protocol used to transfer files to and from a remote machine in s simple way. It is normally used only for booting diskless workstations and also to transfer data in the Preboot eXecution Environment (PXE).t nf_conntrack_tftps tftp-clients TFTP Clients This option allows you to access Trivial File Transfer Protocol (TFTP) servers. You need the tftp package installed for this option to be useful.s
cluster-suites Red Hat Cluster Suitei i ig+ iHR s This option allows you to use the Red Hat Cluster Suite. Ports are opened for openais, ricci and dlm. You need the Red Hat Cluster Suite installed for this option to be useful.s
amanda-clients Amanda Backup Clienti`' s The Amanda backup client option allows you to connect to a Amanda backup and archiving server. You need the amanda-client package installed for this option to be useful.t nf_conntrack_amandas
bacula-clients
Bacula Clienti# s This option allows a Bacula server to connect to the local machine to schedule backups. You need the bacula-client package installed for this option to be useful.t baculat Baculai# i# sy Bacula is a network backup solution. Enable this option, if you plan to provide Bacula backup, file and storage services.t libvirts Virtual Machine Managementi}@ s Enable this option if you want to allow remote virtual machine management with SASL authentication and encryption (digest-md5 passwords or GSSAPI/Kerberos). The libvirtd service is needed for this option to be useful.s libvirt-tlss Virtual Machine Management (TLS)i@ s Enable this option if you want to allow remote virtual machine management with TLS encryption, x509 certificates and optional SASL authentication. The libvirtd service is needed for this option to be useful.c C s* x# t D] } | i | j o | Sq Wd S( N( t service_listR R ( R t x( ( s0 /usr/share/system-config-firewall/fw_services.pyt getByKey s
c C s* x# t D] } | i | j o | Sq Wd S( N( RK R R ( R RL ( ( s0 /usr/share/system-config-firewall/fw_services.pyt getByName s
c C s} xv t D]n } t | } t | | } | | f | i j p2 t | | f | i j p | | f | i j o | Sq Wd S( N( RK R R R t strR ( t portt protoRL t idR ( ( s0 /usr/share/system-config-firewall/fw_services.pyt getByPort s 2 N( ( R R ( R R ( R R ( R R ( NR ( NR ( i R ( R R ( R" R ( R% R ( R) R ( R+ R ( R- R ( R. R ( R/ R ( R. R ( R/ R ( R3 R ( R4 R ( R7 R ( R7 R ( R9 R ( R; R ( R> R ( R? R ( RB R ( RE R ( i R ( i R ( ig+ R ( iHR R ( i`' R ( i# R ( i# R ( i# R ( i# R ( i}@ R ( i@ R ( t fw_configR t fw_functionsR R R R RK RM RN RS ( ( ( s0 /usr/share/system-config-firewall/fw_services.pyt s