Hide Forgot
Description of problem: Configuring the firewall in fedora without a trusted services entry in the system-config-firewall tool is difficult Version-Release number of selected component (if applicable): matahari.x86_64 0.4.1-2.fc15 How reproducible: 100% Steps to Reproduce: 1. start matahari in a vm 2. have matahari communicate to the local machine running qpid 3. default matahari port (49000) blocked by firewall preventing access Actual results: matahari doesn't work Expected results: matahari works and is easy to configure the firewall Additional info: need the port for matahari in the services file need matahari added to system-config-firewall
Do we need to register the port with the IANA to get it in the /etc/services file? That seems the obvious way to go about it.
Yep, please follow the official IANA registration process from http://www.iana.org/go/draft-ietf-tsvwg-iana-ports (or the final version of the document, once available).
Port 49000 has been assigned to matahari by the IANA: https://fedorahosted.org/pipermail/matahari/2011-August/001767.html
(In reply to comment #0) > Description of problem: > Configuring the firewall in fedora without a trusted services entry in the > system-config-firewall tool is difficult lokkit -p 49000:tcp Is all you need to do to open the port on the firewall. We should however support something like: lokkit -s matahari Now that we have an official iana port. However, I do not think that this port should be open by default on all Fedora systems. The security model with QMF is _lax by default_ so opening this port would be a security risk. So we'll focus this bug instead on getting port 49000 added to /etc/services so that lokkit -s matahari will work
I will sync /etc/services with IANA in Fedora Rawhide soon...
As discussed above, we don't wish to open the firewall port by default. The better way to connect to a remote box is to configure it to use broker federation to a trusted server. The port registration is present in /etc/services in Fedora Rawhide, setup-2.8.43-1.fc17