tilecache: tweak shorewall ICP UDP rule
authorGrant Slater <git@firefishy.com>
Thu, 16 Jan 2014 20:52:45 +0000 (20:52 +0000)
committerGrant Slater <git@firefishy.com>
Thu, 16 Jan 2014 20:52:45 +0000 (20:52 +0000)
cookbooks/tilecache/recipes/default.rb

index 209a83dc969f3166059e13f000b5303016ddb9e8..b6db40164f1513748f442096abc60030fa13b8e0 100644 (file)
@@ -46,7 +46,7 @@ tilecaches.each do |cache|
       dest "fw"
       proto "udp"
       dest_ports "3130"
       dest "fw"
       proto "udp"
       dest_ports "3130"
-      source_ports "1024:"
+      source_ports "3130"
     end
     firewall_rule "accept-squid-icp-reply" do
       action :accept
     end
     firewall_rule "accept-squid-icp-reply" do
       action :accept
@@ -55,7 +55,7 @@ tilecaches.each do |cache|
       dest "net:#{address}"
       proto "udp"
       dest_ports "3130"
       dest "net:#{address}"
       proto "udp"
       dest_ports "3130"
-      source_ports "1024:"
+      source_ports "3130"
     end
   end
 end
     end
   end
 end