+hcoop-firewall-config (2) stable; urgency=low
+
+ * Allow outbound kadmin by default (to e.g. extract host keytab)
+
+ -- Clinton Ebadi <clinton@unknownlamer.org> Thu, 06 Dec 2012 02:52:36 -0500
+
hcoop-firewall-config (1) stable; urgency=low
* Include service firewall rules Instead of a per-machine package, keep the ports with the service for now. Ideally domtool would handle all of this.
proto tcp dport 1235 ACCEPT;
proto (tcp udp) dport ( kerberos afs3-fileserver afs3-callback afs3-prserver afs3-vlserver afs3-volser afs3-errors afs3-bos ) ACCEPT;
+ proto tcp dport kerberos-adm ACCEPT;
proto (tcp udp) dport ntp ACCEPT;
proto (tcp udp) dport domain ACCEPT;