Services automaticly change firewall rules to open access to themselfs.

[Jeremy Katz]

On Mon, 2007-08-20 at 16:20 +0000, "Jóhann B. Guðmundsson" wrote:
> Any thoughts on implementing  automatically port opening for service 
> that need to open port access in the firewall
> as in when service is started that needs port opening it would 
> automatically read some firewall.conf
> file for that and open the port automatically according to those 
> settings in the firewall.conf file
> ( add the iptables rules automatically when the service is started and 
> remove those rules when the service is stopped )
> 
> Doing chkconfig service or service service start/stop and it would also 
> open the port for that service in the firewall

I think it's a great idea and would go a long way towards making things
more usable.  One of the questions is do you do the firewall change on
service start/stop or at chkconfig time.  And I'm a little bit torn on
that one.  chkconfig time makes it "simpler" as far as not requiring
initscript changes.  start/stop seems like it's probably more "correct",
but would then require initscripts to call a new function on start/stop

Jeremy