Firewall rules

[hcoop/zz_old/debian/hcoop-apache2-config.git] / files / apache_out.rules

diff --git a/files/apache_out.rules b/files/apache_out.rules
new file mode 100644 (file)
index 0000000..3512fd8
--- /dev/null
+++ b/files/apache_out.rules
@@ -0,0 +1,6 @@
+# (allow connections to mod_proxiable hosts)
+@def $APACHEUID = `id www-data -u`;
+
+mod owner uid-owner $APACHEUID { proto tcp daddr 69.90.123.68 dport 1024:65535 ACCEPT; # servers on mire
+                                proto tcp daddr 69.90.123.67 dport 80 ACCEPT; # mailman on deleuze
+                              }