From dc6d48611d920287c690f4bcaab18e8eba94fc1e Mon Sep 17 00:00:00 2001 From: Zev Benjamin Date: Wed, 12 Dec 2012 17:02:05 -0500 Subject: [PATCH] puppet: Accept traffic on port 5432 (postgresql) (imported from commit bf30d0af2377209f3d5c10add3a526a1fee28dd8) --- servers/puppet/files/iptables/rules | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/servers/puppet/files/iptables/rules b/servers/puppet/files/iptables/rules index ebfaad1238..f4f39eb7d3 100644 --- a/servers/puppet/files/iptables/rules +++ b/servers/puppet/files/iptables/rules @@ -17,10 +17,11 @@ # Accept incoming traffic related to established connections -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -# Accept incoming traffic on TCP ports 22 (SSH), 80 (HTTP), and 443 (HTTPS) --A INPUT -p tcp --dport 22 -j ACCEPT --A INPUT -p tcp --dport 80 -j ACCEPT --A INPUT -p tcp --dport 443 -j ACCEPT +# Accept incoming traffic on TCP ports 22 (SSH), 80 (HTTP), 443 (HTTPS), and 5432 (Postgres) +-A INPUT -p tcp --dport 22 -j ACCEPT +-A INPUT -p tcp --dport 80 -j ACCEPT +-A INPUT -p tcp --dport 443 -j ACCEPT +-A INPUT -p tcp --dport 5432 -j ACCEPT # Drop everything else -A INPUT -j LOGDROP