Feature Request: Automatic iptables updates

[eloyd]

When adding an input type with a new port number, would love to see NLS automatically take care of updating /etc/sysconfig/iptables to open the port. Conversely, when removed from the input list, I'd love to see NLS automatically remove it from iptables.

I realize different places have different security needs, but since you're already opening 5544 and all the other pre-configured input ports, why not add others when they get created as well?

[hsmith]

I've reached out to the developers for their input. I can see arguments on both sides for this one.

[eloyd]

Agreed. Which is why I bring up the fact that stock NLS install includes open ports for all pre-configured input types.

[hsmith]

I didn't hear back from the developers. I'll submit a feature request.

[hsmith]

Feature request 8090 has been submitted.

[eloyd]

Thanks.

[lmiltchev]

eloyd, let us know if it is ok to lock the thread. Thanks!

[eloyd]

Yes.