JFIFxxC      C  " }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3RbrJFIFxxC      C  " }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbricmptypes/tos-host-redirect.xml000064400000000402151464212450012662 0ustar00 TOS Host Redirect This message is the datagram is redirected for the type of service and host. icmptypes/host-precedence-violation.xml000064400000000412151464212450014356 0ustar00 Host Precedence Violation This error message is sent if the communication administratively prohibited. icmptypes/router-advertisement.xml000064400000000343151464212450013477 0ustar00 Router Advertisement This message is used by routers to periodically announce the IP address of a multicast interface. icmptypes/communication-prohibited.xml000064400000000427151464212450014306 0ustar00 Communication Prohibited This error message is sent if communication with destination administratively prohibited. icmptypes/time-exceeded.xml000064400000000375151464212450012016 0ustar00 Time Exceeded This error message is generated if the time-to-live was exceeded either of a packet or of the reassembling of a fragmented packet. icmptypes/bad-header.xml000064400000000402151464212450011257 0ustar00 Bad Header This error message is created if there has been an error in the header of a packet. icmptypes/host-prohibited.xml000064400000000401151464212450012406 0ustar00 Host Prohibited This error message is sent if access from a host administratively prohibited. icmptypes/host-redirect.xml000064400000000362151464212450012064 0ustar00 Host Redirect This message is sent if the datagram is redirected for the host. icmptypes/failed-policy.xml000064400000000405151464212450012027 0ustar00 Failed Policy This error message is generated if the source address failed ingress/egress policy. icmptypes/mld2-listener-report.xml000064400000000501151464212450013275 0ustar00 MLDv2 Multicast Listener Report ICMPv6 Link-Local Multicast Listener Discovery (MDLv2) of type Multicast Listener Report (type 143) (RFC 4890 section 4.4.1). icmptypes/neighbour-advertisement.xml000064400000000543151464212450014143 0ustar00 Neighbour Advertisement (Neighbor Advertisement) This informational message is sent in response to a neighbour-solicitation message in order to (unreliably) propagate new information quickly. icmptypes/mld-listener-done.xml000064400000000534151464212450012633 0ustar00 MLD Listener Done ICMPv6 Link-Local Multicast Listener Discovery (MDL) of type Multicast Listener Done (type 132) (RFC 4890 section 4.4.1). Also known as mld-listener-reduction to nft. icmptypes/tos-host-unreachable.xml000064400000000401151464212450013331 0ustar00 TOS Host Unreachable This message is sent if the host is unreachable for the type of service. icmptypes/echo-reply.xml000064400000000255151464212450011360 0ustar00 Echo Reply (pong) This message is the answer to an Echo Request. icmptypes/packet-too-big.xml000064400000000510151464212450012110 0ustar00 Packet Too Big This error message is sent by a router in response to a packet that it cannot forward because the packet is larger than the MTU of the outgoing link. icmptypes/host-unreachable.xml000064400000000367151464212450012541 0ustar00 Host Unreachable This error message is sent if the destination host is unreachable. icmptypes/address-unreachable.xml000064400000000601151464212450013200 0ustar00 Address Unreachable This error message is generated by a router, or by the IPv6 layer in the originating node, in response to a packet that cannot be delivered to its destination address for reasons other than congestion. icmptypes/mld-listener-query.xml000064400000000461151464212450013052 0ustar00 MLD Listener Query ICMPv6 Link-Local Multicast Listener Discovery (MDL) of type Multicast Listener Query (type 130) (RFC 4890 section 4.4.1). icmptypes/router-solicitation.xml000064400000000337151464212450013331 0ustar00 Router Solicitation This message is used by a host attached to a multicast link to request a Router Advertisement. icmptypes/network-unreachable.xml000064400000000367151464212450013255 0ustar00 Network Unreachable This message is sent if the destination network is unreachable. icmptypes/reject-route.xml000064400000000364151464212450011722 0ustar00 Reject Route This error message is sent if the route to destination is rejected. icmptypes/ip-header-bad.xml000064400000000345151464212450011673 0ustar00 Ip Header Bad This error message is sent if the IP header is bad. icmptypes/port-unreachable.xml000064400000000351151464212450012541 0ustar00 Port Unreachable This error message is sent if the port unreachable. icmptypes/source-quench.xml000064400000000370151464212450012070 0ustar00 Source Quench This error message is generated to tell a host to reduce the pace at which it is sending packets. icmptypes/source-route-failed.xml000064400000000354151464212450013167 0ustar00 Source Route Failed This message is sent if the source route has failed. icmptypes/mld-listener-report.xml000064400000000463151464212450013222 0ustar00 MLD Listener Report ICMPv6 Link-Local Multicast Listener Discovery (MDL) of type Multicast Listener Report (type 131) (RFC 4890 section 4.4.1). icmptypes/network-prohibited.xml000064400000000372151464212450013131 0ustar00 Network Prohibited This message is sent if the network is administratively prohibited. icmptypes/ttl-zero-during-reassembly.xml000064400000000445151464212450014524 0ustar00 TTL Zero During Reassembly This error message is sent if a host fails to reassemble a fragmented datagram within its time limit. icmptypes/host-unknown.xml000064400000000357151464212450011766 0ustar00 Host Unknown This error message is sent if the destination host is unknown. icmptypes/tos-network-redirect.xml000064400000000420151464212450013376 0ustar00 TOS Network Redirect This message is sent if the datagram is redirected for the type of service and network. icmptypes/beyond-scope.xml000064400000000446151464212450011702 0ustar00 Beyond Scope This error message is sent if transmitting a package whould cross a zone boundary of the scope of the source address. icmptypes/fragmentation-needed.xml000064400000000430151464212450013364 0ustar00 Fragmentation Needed This error message is sent if fragmentation is required, and Don not Fragment (DF) flag is set. icmptypes/timestamp-reply.xml000064400000000351151464212450012442 0ustar00 Timestamp Reply This message is used to reply to a timestamp message. icmptypes/network-unknown.xml000064400000000357151464212450012502 0ustar00 Network Unknown This message is sent if the destination network is unknown. icmptypes/parameter-problem.xml000064400000000341151464212450012723 0ustar00 Parameter Problem This error message is generated if the IP header is bad, either by a missing option or bad length. icmptypes/tos-network-unreachable.xml000064400000000415151464212450014052 0ustar00 TOS Network Unreachable This error message is sent if the network is unreachable for the type of service. icmptypes/unknown-option.xml000064400000000371151464212450012315 0ustar00 Unknown Option This error message is sent if an unrecognized IPv6 option encountered. icmptypes/ttl-zero-during-transit.xml000064400000000400151464212450014031 0ustar00 TTL Zero During Transit This error message is sent if the time to live exceeded in transit. icmptypes/redirect.xml000064400000000271151464212450011110 0ustar00 Redirect This error message informs a host to send packets on another route. icmptypes/echo-request.xml000064400000000322151464212450011710 0ustar00 Echo Request (ping) This message is used to test if a host is reachable mostly with the ping utility. icmptypes/destination-unreachable.xml000064400000000336151464212450014101 0ustar00 Destination Unreachable This error message is generated by a host or gateway if the destination is not reachable. icmptypes/precedence-cutoff.xml000064400000000400151464212450012662 0ustar00 Precedence Cutoff This message is sent if the precedence is lower than the required minimum. icmptypes/protocol-unreachable.xml000064400000000371151464212450013420 0ustar00 Protocol Unreachable This message is sent if the destination protocol is unreachable. icmptypes/neighbour-solicitation.xml000064400000000711151464212450013767 0ustar00 Neighbour Solicitation (Neighbor Solicitation) This informational message is sent by a node to determine the link-layer address of a neighbor, or to verify that a neighbor is still reachable via a cached link-layer address. Neighbor Solicitations are also used for Duplicate Address Detection. icmptypes/timestamp-request.xml000064400000000344151464212450013001 0ustar00 Timestamp Request This message is used for time synchronization. icmptypes/network-redirect.xml000064400000000370151464212450012577 0ustar00 Network Redirect This message is sent if the datagram is redirected for the network. icmptypes/unknown-header-type.xml000064400000000403151464212450013210 0ustar00 Unknown Header Type This error message is sent if an unrecognized Next Header type encountered. icmptypes/required-option-missing.xml000064400000000361151464212450014104 0ustar00 Required Option Missing This message is sent if a required option is missing. icmptypes/no-route.xml000064400000000357151464212450011064 0ustar00 No Route This error message is set if there is no route to the destination. zones/block.xml000064400000000453151464212450007524 0ustar00 Block Unsolicited incoming network packets are rejected. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed. zones/drop.xml000064400000000443151464212450007375 0ustar00 Drop Unsolicited incoming network packets are dropped. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed. zones/public.xml000064400000000527151464212450007712 0ustar00 Public For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. zones/work.xml000064400000000523151464212450007412 0ustar00 Work For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. zones/dmz.xml000064400000000445151464212450007225 0ustar00 DMZ For computers in your demilitarized zone that are publicly-accessible with limited access to your internal network. Only selected incoming connections are accepted. zones/nm-shared.xml000064400000001331151464212450010304 0ustar00 NetworkManager Shared This zone is used internally by NetworkManager when activating a profile that uses connection sharing and doesn't have an explicit firewall zone set. Block all traffic to the local machine except ICMP, ICMPv6, DHCP and DNS. Allow all forwarded traffic. Note that future package updates may change the definition of the zone unless you overwrite it with your own definition. zones/external.xml000064400000000460151464212450010252 0ustar00 External For use on external networks. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. zones/internal.xml000064400000000634151464212450010247 0ustar00 Internal For use on internal networks. You mostly trust the other computers on the networks to not harm your computer. Only selected incoming connections are accepted. zones/home.xml000064400000000615151464212450007362 0ustar00 Home For use in home areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. zones/trusted.xml000064400000000242151464212450010120 0ustar00 Trusted All network connections are accepted. policies/allow-host-ipv6.xml000064400000001211151464212450012047 0ustar00 Allow host IPv6 Allows basic IPv6 functionality for the host running firewalld. ipsets/README000064400000000035151464212450006735 0ustar00Location for built-in ipsets services/wbem-https.xml000064400000000466151464212450011215 0ustar00 wbem-https Web-Based Enterprise Management (WBEM) is a set of systems management technologies developed to unify the management of distributed computing environments services/managesieve.xml000064400000000535151464212450011404 0ustar00 ManageSieve The ManageSieve Protocol allows a local client to manage eMail sieve scripts on a remote server. If you plan to provide a ManageSieve service (e.g. with dovecot pigeonhole), enable this option. services/audit.xml000064400000000455151464212450010227 0ustar00 Audit The Linux Audit subsystem is used to log security events. Enable this option, if you plan to aggregate audit events to/from a remote server/client. services/tftp.xml000064400000000650151464212450010073 0ustar00 TFTP The Trivial File Transfer Protocol (TFTP) is a protocol used to transfer files to and from a remote machine in a simple way. It is normally used only for booting diskless workstations and also to transfer data in the Preboot eXecution Environment (PXE). services/spotify-sync.xml000064400000000423151464212450011563 0ustar00 Spotify Client Sync The Spotify Client allows you to sync local music files with your phone. services/kube-apiserver.xml000064400000000464151464212450012045 0ustar00 Kubernetes Api Server The Kubernetes API server validates and configures data for the api objects which include pods, services, replicationcontrollers, and others. services/radius.xml000064400000001010151464212450010374 0ustar00 RADIUS The Remote Authentication Dial In User Service (RADIUS) is a protocol for user authentication over networks. It is mostly used for modem, DSL or wireless user authentication. If you plan to provide a RADIUS service (e.g. with freeradius), enable this option. services/ssh.xml000064400000000717151464212450007717 0ustar00 SSH Secure Shell (SSH) is a protocol for logging into and executing commands on remote machines. It provides secure encrypted communications. If you plan on accessing your machine remotely via SSH over a firewalled interface, enable this option. You need the openssh-server package installed for this option to be useful. services/dns-over-tls.xml000064400000000476151464212450011461 0ustar00 DNS over TLS DNS over TLS (DoT) is a security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol services/RH-Satellite-6.xml000064400000001054151464212450011515 0ustar00 Red Hat Satellite 6 Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments. services/mdns.xml000064400000000650151464212450010057 0ustar00 Multicast DNS (mDNS) mDNS provides the ability to use DNS programming interfaces, packet formats and operating semantics in a small network without a conventional DNS server. If you plan to use Avahi, do not disable this option. services/quassel.xml000064400000000421151464212450010567 0ustar00 Quassel IRC Quassel is a distributed IRC client, meaning that one or more clients can attach to and detach from the central core. services/klogin.xml000064400000000371151464212450010401 0ustar00 klogin The kerberized rlogin server accepts BSD-style rlogin sessions, but uses Kerberos 5 authentication. services/libvirt.xml000064400000000605151464212450010571 0ustar00 Virtual Machine Management Enable this option if you want to allow remote virtual machine management with SASL authentication and encryption (digest-md5 passwords or GSSAPI/Kerberos). The libvirtd service is needed for this option to be useful. services/rtsp.xml000064400000000536151464212450010111 0ustar00 RTSP The Real Time Streaming Protocol (RTSP) is a network control protocol designed for use in entertainment and communications systems to control streaming media servers. services/svdrp.xml000064400000000437151464212450010257 0ustar00 SVDRP The Simple Video Disk Recorder Protocol (SVDRP) allows to control video disk recorder functionality. services/bacula.xml000064400000000532151464212450010344 0ustar00 Bacula Bacula is a network backup solution. Enable this option, if you plan to provide Bacula backup, file and storage services. services/rsh.xml000064400000000466151464212450007717 0ustar00 rsh Rsh is a protocol for logging into remote machines. It is unencrypted, and provides little security from network snooping attacks. Enabling rsh is not recommended. services/murmur.xml000064400000000362151464212450010445 0ustar00 Murmur Murmur is the server of the Mumble VoIP chat system. services/syncthing.xml000064400000000536151464212450011127 0ustar00 Syncthing Syncthing is a peer-to-peer file synchronization service. Enable this option, if you plan to run the Syncthing service. services/amqps.xml000064400000000433151464212450010236 0ustar00 amqps The Advanced Message Queuing Protocol (AMQP) over SSL is an open standard application layer protocol for message-oriented middleware. services/ceph.xml000064400000000511151464212450010031 0ustar00 ceph Ceph is a distributed object store and file system. Enable this option to support Ceph's Object Storage Daemons (OSD), Metadata Server Daemons (MDS), or Manager Daemons (MGR). services/bitcoin-testnet.xml000064400000000431151464212450012226 0ustar00 Bitcoin testnet The default port used by Bitcoin testnet. Enable this option if you plan to be a Bitcoin full node on the test network. services/pmwebapis.xml000064400000001040151464212450011077 0ustar00 Secure performance metrics web API (pmwebapis) This option allows web clients to use PCP (Performance Co-Pilot) monitoring services over a secure connection. If you need to allow remote web clients to connect to your machine to monitor aspects of its performance, and you consider that information to be sensitive, enable this option. You need the pcp package installed for this option to be useful. services/nut.xml000064400000000560151464212450007724 0ustar00 NUT Network UPS Tools (NUT) is a protocol that allows to monitor and control power devices like uninterruptible power supplies. services/ldap.xml000064400000000307151464212450010035 0ustar00 LDAP Lightweight Directory Access Protocol (LDAP) server services/ipp-client.xml000064400000000706151464212450011164 0ustar00 Network Printing Client (IPP) The Internet Printing Protocol (IPP) is used for distributed printing. IPP (over udp) provides the ability to get information about a printer (e.g. capability and status) and to control printer jobs. If you plan to use a remote network printer via cups, do not disable this option. services/kibana.xml000064400000000600151464212450010336 0ustar00 Kibana Kibana is an open source data visualization platform that allows you to interact with your data through stunning, powerful graphics that can be combined into custom dashboards that help you share insights from your data far and wide. services/proxy-dhcp.xml000064400000000405151464212450011211 0ustar00 Proxy DHCP PXE redirection service (Proxy DHCP) responds to PXE clients and provides redirection to PXE boot servers. services/tftp-client.xml000064400000000440151464212450011344 0ustar00 TFTP Client This option allows you to access Trivial File Transfer Protocol (TFTP) servers. You need the tftp package installed for this option to be useful. services/nrpe.xml000064400000000367151464212450010067 0ustar00 NRPE NRPE allows you to execute Nagios plugins on a remote host in as transparent a manner as possible. services/syncthing-gui.xml000064400000000451151464212450011705 0ustar00 Syncthing GUI Enable this option in addition to the Syncthing option to allow traffic to the Syncthing web interface. (Be sure to secure it accordingly). services/pmwebapi.xml000064400000000714151464212450010723 0ustar00 Performance metrics web API (pmwebapi) This option allows web clients to use PCP (Performance Co-Pilot) monitoring services. If you need to allow remote web clients to connect to your machine to monitor aspects of its performance, enable this option. You need the pcp package installed for this option to be useful. services/ipsec.xml000064400000001576151464212450010231 0ustar00 IPsec Internet Protocol Security (IPsec) is the standarized IETF VPN architecture defined in RFC 4301. IPsec is negotiated using the IKEv1 (RFC 2409) or IKEv2 (RFC 7296) protocol, which in itself uses encryption and authentication. IPsec provides Internet Protocol (IP) packet encryption and authentication. Both IKE and IPsec can be encapsulated in UDP (RFC 3948) or TCP (RFC 8229 to make it easier to traverse NAT. Enabling this service will enable IKE, IPsec and their encapsulation protocols and ports. Note that IKE and IPsec can also be configured to use non-default ports, but this is not common practise. services/steam-streaming.xml000064400000001167151464212450012222 0ustar00 Steam In-Home Streaming Steam in-home streaming allows you to play a game on one computer when the game process is actually running on another computer elsewhere in your home. Through Steam, game audio and video is captured on the remote computer and sent to the player's computer. The game input (keyboard, mouse or gamepad) is sent from the player's computer to the game process on the remote computer. services/sip.xml000064400000000760151464212450007713 0ustar00 SIP The Session Initiation Protocol (SIP) is a communications protocol for signaling and controlling multimedia communication sessions. The most common applications of SIP are in Internet telephony for voice and video calls, as well as instant messaging, over Internet Protocol (IP) networks. services/RH-Satellite-6-capsule.xml000064400000000575151464212450013156 0ustar00 Red Hat Satellite 6 Capsule Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments. services/kerberos.xml000064400000000351151464212450010730 0ustar00 Kerberos Kerberos network authentication protocol server services/wbem-http.xml000064400000000540151464212450011023 0ustar00 wbem-http Web-Based Enterprise Management (WBEM) is a set of systems management technologies developed to unify the management of distributed computing environments. This is the unencrypted protocol variant. services/ftp.xml000064400000000551151464212450007707 0ustar00 FTP FTP is a protocol used for remote file transfer. If you plan to make your FTP server publicly available, enable this option. You need the vsftpd package installed for this option to be useful. services/distcc.xml000064400000000315151464212450010365 0ustar00 distcc Distcc is a protocol used for distributed compilation. services/apcupsd.xml000064400000000435151464212450010556 0ustar00 apcupsd The American Power Conversion (APC) uninterruptible power supply (UPS) daemon protocol allows to monitor and control APC UPS devices. services/upnp-client.xml000064400000000410151464212450011346 0ustar00 UPnP Client Universal Plug and Play client for auto-configuration of network routers (use only in trusted zones). services/dhcp.xml000064400000000343151464212450010033 0ustar00 DHCP This allows a DHCP server to accept messages from DHCP clients and relay agents. services/foreman-proxy.xml000064400000000416151464212450011724 0ustar00 foreman-proxy The Smart Proxy is a project which provides a restful API to various sub-systems. services/mssql.xml000064400000000252151464212450010253 0ustar00 mssql Microsoft SQL Server services/freeipa-ldaps.xml000064400000000751151464212450011634 0ustar00 FreeIPA with LDAPS (deprecated) This service is deprecated. Please use freeipa-4 service instead. services/wsmans.xml000064400000000503151464212450010423 0ustar00 wsmans Web Services for Management (WSMAN) is a protocol for managing PCs, servers, devices, Web services and other applications. This variant of the protocol uses TLS encryption. services/kprop.xml000064400000000266151464212450010254 0ustar00 kprop Kerberos KDC Propagation Protocol services/xmpp-server.xml000064400000001041151464212450011401 0ustar00 XMPP (Jabber) server Extensible Messaging and Presence Protocol (XMPP) server connection protocols allows multiple XMPP (Jabber) servers to work in a federated fashion. Users on one server will be able to see the presence of and communicate with users on another servers. Enable this if you run an XMPP (Jabber) server and you wish users on your server to communicate with users on other XMPP servers. services/squid.xml000064400000000255151464212450010244 0ustar00 squid Squid HTTP proxy server services/salt-master.xml000064400000000511151464212450011346 0ustar00 Salt Master Salt is a protocol used for infrastructure management via a dynamic communication bus. These ports are required on the salt master node. services/amqp.xml000064400000000421151464212450010050 0ustar00 amqp The Advanced Message Queuing Protocol (AMQP) is an open standard application layer protocol for message-oriented middleware. services/pop3.xml000064400000000534151464212450010000 0ustar00 POP-3 The Post Office Protocol version 3 (POP3) is a protocol to retrieve email from a remote server over a TCP/IP connection. Enable this option, if you plan to provide a POP3 service (e.g. with dovecot). services/bitcoin-testnet-rpc.xml000064400000000463151464212450013015 0ustar00 Bitcoin testnet RPC Enable this option if you need access to the Bitcoin RPC interface running on the testnet. This is not required when connecting on localhost. services/snmp.xml000064400000000526151464212450010075 0ustar00 SNMP Simple Network Management Protocol is an "Internet-standard protocol for managing devices on IP networks". Enable this service if you run SNMP agent (server). services/nmea-0183.xml000064400000000445151464212450010431 0ustar00 nmea-0183 NMEA-0183 Navigational Data server for use with Global Navigation Satellite System (GNSS) devices. services/plex.xml000064400000002000151464212450010055 0ustar00 PLEX Plex Media Server (PMS) is the back-end media server component of Plex. It organizes audio (music) and visual (photos and videos) content from personal media libraries and streams it to their player counterparts, either on the same machine, the same local area network, or over the Internet. services/cfengine.xml000064400000000250151464212450010670 0ustar00 CFEngine CFEngine server services/ovirt-vmconsole.xml000064400000000353151464212450012264 0ustar00 oVirt VM Console oVirt VM Consoles enables secure access to virtual machine serial console. services/rsyncd.xml000064400000000467151464212450010426 0ustar00 Rsync in daemon mode Rsync in daemon mode works as a central server, in order to house centralized files and keep them synchronized. services/xmpp-bosh.xml000064400000000775151464212450011043 0ustar00 XMPP (Jabber) web client Extensible Messaging and Presence Protocol (XMPP) web client protocol allows web based chat clients such as JWChat to connect to the XMPP (Jabber) server. This is also known as the Bidirectional-streams Over Synchronous HTTP (BOSH) protocol. Enable this if you run an XMPP (Jabber) server and you wish web clients to connect to your server. services/redis-sentinel.xml000064400000000324151464212450012041 0ustar00 redis-sentinel Redis Sentinel provides high availability for Redis. services/ovirt-imageio.xml000064400000000404151464212450011666 0ustar00 oVirt Image I/O oVirt Image I/O simplifies the workflow of introducing new oVirt images into the oVirt environment. services/rpc-bind.xml000064400000000326151464212450010614 0ustar00 rpc-bind Remote Procedure Call Bind services/redis.xml000064400000000414151464212450010222 0ustar00 redis Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker. services/collectd.xml000064400000000450151464212450010705 0ustar00 Collectd Collectd is a monitoring system that allows metrics to be sent over the network. This rule allows incoming collectd traffic from remote boxes. services/matrix.xml000064400000000660151464212450010423 0ustar00 Matrix Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Port 443 is the 'client' port, whereas port 8448 is the Federation port. Federation is the process by which users on different servers can participate in the same room. services/ceph-mon.xml000064400000000446151464212450010627 0ustar00 ceph-mon Ceph is a distributed object store and file system. Enable this option to support Ceph's Monitor Daemon. services/syslog-tls.xml000064400000000674151464212450011244 0ustar00 syslog-tls Syslog is a client/server protocol: a logging application transmits a text message to the syslog receiver. The receiver is commonly called syslogd, syslog daemon or syslog server. Syslog-tls uses TLS encryption to protect the messages during transport. services/ircs.xml000064400000000377151464212450010064 0ustar00 IRC TLS/SSL An IRCd, short for Internet Relay Chat daemon, is server software that implements the IRC protocol. services/irc.xml000064400000000367151464212450007700 0ustar00 IRC An IRCd, short for Internet Relay Chat daemon, is server software that implements the IRC protocol. services/dns.xml000064400000000532151464212450007701 0ustar00 DNS The Domain Name System (DNS) is used to provide and request host and domain names. Enable this option, if you plan to provide a domain name service (e.g. with bind). services/ganglia-client.xml000064400000000270151464212450011772 0ustar00 ganglia-client Ganglia monitoring daemon services/bgp.xml000064400000000523151464212450007665 0ustar00 BGP service listen Border Gateway Protocol (BGP) is a standardized exterior gateway protocol designed to exchange routing and reachability information among autonomous systems (AS) on the Internet services/smtps.xml000064400000001101151464212450010254 0ustar00 Mail (SMTP over SSL) This option allows incoming SMTPs mail delivery. If you need to allow remote hosts to connect directly to your machine to deliver mail in a secure way, enable this option. You do not need to enable this if you collect your mail from your ISP's server by POP3 or IMAP, or if you use a tool such as fetchmail. Note that an improperly configured SMTP server can allow remote machines to use your server to send spam. services/zabbix-agent.xml000064400000000472151464212450011473 0ustar00 Zabbix Agent Zabbix is a mature and effortless enterprise-class open source monitoring solution for network monitoring and application monitoring of millions of metrics. services/mqtt.xml000064400000000437151464212450010106 0ustar00 mqtt The Message Queuing Telemetry Transport (MQTT) is a machine-to-machine connectivity protocol. This variant of the protocol is unencrypted. services/bitcoin.xml000064400000000364151464212450010547 0ustar00 Bitcoin The default port used by Bitcoin. Enable this option if you plan to be a full Bitcoin node. services/tile38.xml000064400000000335151464212450010226 0ustar00 tile38 Tile38 is a geospatial database, spatial index, and realtime geofence. services/bittorrent-lsd.xml000064400000000632151464212450012072 0ustar00 BitTorrent Local Peer Discovery (LSD) Local Peer Discovery is a protocol designed to support the discovery of BitTorrent peers on a local area network. Enable this service if you run a BitTorrent client. services/mosh.xml000064400000000731151464212450010064 0ustar00 Mobile shell that supports roaming and intelligent local echo. Mosh is a remote terminal application that supports intermittent network connectivity, roaming to different IP address without dropping the connection, intelligent local echo and line editing to reduct the effects of "network lag" on high-latency connections. services/kshell.xml000064400000000362151464212450010400 0ustar00 kshell Kerberized rshell server accepts rshell commands authenticated and encrypted with Kerberos 5 services/kadmin.xml000064400000000266151464212450010364 0ustar00 kadmin Kerberos Administration Protocol services/rdp.xml000064400000000267151464212450007707 0ustar00 rdp Microsoft's Remote Desktop Protocol services/smtp-submission.xml000064400000000347151464212450012275 0ustar00 Mail (SMTP-Submission) SMTP-Submission allows remote users to submit mail over port 587. services/pop3s.xml000064400000000545151464212450010165 0ustar00 POP-3 over SSL The Post Office Protocol version 3 (POP3) is a protocol to retrieve email from a remote server over a TCP/IP connection. Enable this option, if you plan to provide a POP3 service (e.g. with dovecot). services/libvirt-tls.xml000064400000000601151464212450011365 0ustar00 Virtual Machine Management (TLS) Enable this option if you want to allow remote virtual machine management with TLS encryption, x509 certificates and optional SASL authentication. The libvirtd service is needed for this option to be useful. services/nbd.xml000064400000000372151464212450007662 0ustar00 NBD Network Block Device (NBD) is a high-performance protocol for exporting disk images between machines. services/vnc-server.xml000064400000000733151464212450011212 0ustar00 Virtual Network Computing Server (VNC) A VNC server provides an external accessible X session. Enable this option if you plan to provide a VNC server with direct access. The access will be possible for displays :0 to :3. If you plan to provide access with SSH, do not open this option and use the via option of the VNC viewer. services/syslog.xml000064400000000511151464212450010432 0ustar00 syslog Syslog is a client/server protocol: a logging application transmits a text message to the syslog receiver. The receiver is commonly called syslogd, syslog daemon or syslog server. services/samba-client.xml000064400000000563151464212450011460 0ustar00 Samba Client This option allows you to access Windows file and printer sharing networks. You need the samba-client package installed for this option to be useful. services/minidlna.xml000064400000000527151464212450010714 0ustar00 MiniDLNA MiniDLNA is a simple media server software with the aim to be fully compliant with DLNA/UPNP-AV clients. Enable this service if you run minidlna service. services/rquotad.xml000064400000000325151464212450010574 0ustar00 rquotad Remote Quota Server Daemon services/ntp.xml000064400000000605151464212450007717 0ustar00 Network Time Protocol (NTP) Server The Network Time Protocol (NTP) allows to synchronize computers to a time server. Enable this option, if you are providing a NTP server. You need the ntp or chrony package installed for this option to be useful. services/mysql.xml000064400000000253151464212450010262 0ustar00 MySQL MySQL Database Server services/puppetmaster.xml000064400000000451151464212450011646 0ustar00 Puppet Master Puppet is a network tool for managing many disparate systems. Puppet Master is a server which Puppet Agents pull their configurations from. services/cockpit.xml000064400000000323151464212450010547 0ustar00 Cockpit Cockpit lets you access and configure your server remotely. services/sane.xml000064400000000504151464212450010042 0ustar00 SANE network daemon (saned) The SANE (Scanner Access Now Easy) daemon allows remote clients to access image acquisition devices available on the local host. services/smtp.xml000064400000001046151464212450010101 0ustar00 Mail (SMTP) This option allows incoming SMTP mail delivery. If you need to allow remote hosts to connect directly to your machine to deliver mail, enable this option. You do not need to enable this if you collect your mail from your ISP's server by POP3 or IMAP, or if you use a tool such as fetchmail. Note that an improperly configured SMTP server can allow remote machines to use your server to send spam. services/mongodb.xml000064400000000355151464212450010545 0ustar00 mongodb MongoDB is a free and open-source cross-platform document-oriented database program. services/pmcd.xml000064400000000661151464212450010043 0ustar00 Performance metrics collector (pmcd) This option allows PCP (Performance Co-Pilot) monitoring. If you need to allow remote hosts to connect directly to your machine to monitor aspects of its performance, enable this option. You need the pcp package installed for this option to be useful. services/ldaps.xml000064400000000350151464212450010216 0ustar00 LDAPS Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) server services/dropbox-lansync.xml000064400000000344151464212450012240 0ustar00 dropboxlansync Dropbox LAN sync services/condor-collector.xml000064400000000404151464212450012363 0ustar00 HT Condor Collector The HT Condor Collector is needed to organize the condor worker nodes. services/galera.xml000064400000000444151464212450010352 0ustar00 Galera MariaDB-Galera Database Server services/bitcoin-rpc.xml000064400000000423151464212450011325 0ustar00 Bitcoin RPC Enable this option if you need access to the Bitcoin RPC interface. This is not required when connecting on localhost. services/docker-registry.xml000064400000000566151464212450012241 0ustar00 Docker Registry Docker Registry is the protocol used to serve Docker images. If you plan to make your Docker Registry server publicly available, enable this option. This option is not required for developing Docker images locally. services/kdeconnect.xml000064400000000420151464212450011226 0ustar00 KDE Connect KDE Connect is an application to connect your phone to your computer. services/freeipa-ldap.xml000064400000000750151464212450011450 0ustar00 FreeIPA with LDAP (deprecated) This service is deprecated. Please use freeipa-4 service instead. services/postgresql.xml000064400000000265151464212450011323 0ustar00 PostgreSQL PostgreSQL Database Server services/docker-swarm.xml000064400000000607151464212450011516 0ustar00 Docker integrated swarm mode Natively managed cluster of Docker Engines (>=1.12.0), where you deploy services. services/high-availability.xml000064400000001140151464212450012500 0ustar00 Red Hat High Availability This allows you to use the Red Hat High Availability (previously named Red Hat Cluster Suite). Ports are opened for corosync, pcsd, pacemaker_remote, dlm and corosync-qnetd. services/telnet.xml000064400000000611151464212450010406 0ustar00 Telnet Telnet is a protocol for logging into remote machines. It is unencrypted, and provides little security from network snooping attacks. Enabling telnet is not recommended. You need the telnet-server package installed for this option to be useful. services/sips.xml000064400000000433151464212450010073 0ustar00 SIP-TLS (SIPS) SIP-TLS is a modified SIP (Session Initiation Protocol) using TLS for secure signaling. services/isns.xml000064400000000546151464212450010076 0ustar00 iSNS The Internet Storage Name Service (iSNS) is a protocol that allows automated discovery, management and configuration of iSCSI and Fibre Channel devices on a TCP/IP network. services/https.xml000064400000000700151464212450010254 0ustar00 Secure WWW (HTTPS) HTTPS is a modified HTTP used to serve Web pages when security is important. Examples are sites that require logins like stores or web mail. This option is not required for viewing pages locally or developing Web pages. You need the httpd package installed for this option to be useful. services/zabbix-server.xml000064400000000473151464212450011704 0ustar00 Zabbix Server Zabbix is a mature and effortless enterprise-class open source monitoring solution for network monitoring and application monitoring of millions of metrics. services/grafana.xml000064400000000332151464212450010512 0ustar00 grafana Grafana is an open platform for beautiful analytics and monitoring services/xmpp-client.xml000064400000000750151464212450011357 0ustar00 XMPP (Jabber) client Extensible Messaging and Presence Protocol (XMPP) client connection protocol allows XMPP (Jabber) clients such as Empathy, Pidgin, Kopete and Jitsi to connect to an XMPP (Jabber) server. Enable this if you run an XMPP (Jabber) server and you wish clients to be able to connect to the server and communicate with each other. services/openvpn.xml000064400000000517151464212450010605 0ustar00 OpenVPN OpenVPN is a virtual private network (VPN) solution. It is used to create encrypted point-to-point tunnels between computers. If you plan to provide a VPN service, enable this option. services/llmnr.xml000064400000000504151464212450010240 0ustar00 Link-Local Multicast Name Resolution (LLMNR) LLMNR allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link. services/bacula-client.xml000064400000000500151464212450011613 0ustar00 Bacula Client This option allows a Bacula server to connect to the local machine to schedule backups. You need the bacula-client package installed for this option to be useful. services/nfs3.xml000064400000000526151464212450007771 0ustar00 NFS3 The NFS3 protocol is used to share files. You will need to have the NFS tools installed and properly configure your NFS server for this option to be useful. services/xdmcp.xml000064400000000511151464212450010225 0ustar00 XDMCP The X Display Manager Control Protocol (XDMCP) allows to remotely log in to an X desktop environment from any X Window System compatible client. services/nfs.xml000064400000000504151464212450007702 0ustar00 NFS4 The NFS4 protocol is used to share files via TCP networking. You will need to have the NFS tools installed and properly configure your NFS server for this option to be useful. services/snmptrap.xml000064400000000464151464212450010765 0ustar00 SNMPTRAP SNMP traps enable an agent to notify the management station of significant events by way of an unsolicited SNMP message. services/ganglia-master.xml000064400000000260151464212450012006 0ustar00 ganglia-master Ganglia collector services/prometheus.xml000064400000000325151464212450011310 0ustar00 prometheus The Prometheus monitoring system and time series database. services/xmpp-local.xml000064400000000410151464212450011164 0ustar00 XMPP Link-Local Messaging Serverless XMPP-like communication over local networks based on zero-configuration networking. services/ctdb.xml000064400000000450151464212450010030 0ustar00 CTDB CTDB is a cluster implementation of the TDB database used by Samba and other projects to store temporary data. services/synergy.xml000064400000000760151464212450010620 0ustar00 Synergy Synergy lets you easily share your mouse and keyboard between multiple computers, where each computer has its own display. No special hardware is required, all you need is a local area network. Synergy is supported on Windows, Mac OS X and Linux. Redirecting the mouse and keyboard is as simple as moving the mouse off the edge of your screen. services/vdsm.xml000064400000001121151464212450010061 0ustar00 oVirt's Virtual Desktop and Server Manager The VDSM service is required by a Virtualization Manager to manage the Linux hosts. VDSM manages and monitors the host's storage, memory and networks as well as virtual machine creation, other host administration tasks, statistics gathering, and log collection. services/samba-dc.xml000064400000002422151464212450010564 0ustar00 Samba DC This option allows you to use this computer as a Samba Active Directory Domain Controller. You need the samba-dc package installed for this option to be useful. services/privoxy.xml000064400000000775151464212450010646 0ustar00 Privoxy - A Privacy Enhancing Proxy Server Privoxy is a web proxy for enhancing privacy by filtering web page content, managing cookies, controlling access, removing ads, banners, pop-ups and other obnoxious Internet junk. It does not cache web content. Enable this if you run Privoxy and would like to configure your web browser to browse the Internet via Privoxy. services/imap.xml000064400000000507151464212450010045 0ustar00 IMAP The Internet Message Access Protocol(IMAP) allows a local client to access email on a remote server. If you plan to provide a IMAP service (e.g. with dovecot), enable this option. services/dhcpv6-client.xml000064400000000461151464212450011564 0ustar00 DHCPv6 Client This option allows a DHCP for IPv6 (DHCPv6) client to obtain addresses and other IPv6 settings from DHCPv6 server. services/dhcpv6.xml000064400000000352151464212450010307 0ustar00 DHCPv6 This allows a DHCPv6 server to accept messages from DHCPv6 clients and relay agents. services/ovirt-storageconsole.xml000064400000000527151464212450013311 0ustar00 oVirt Storage-Console oVirt Storage Console is a web-based storage management platform specially designed to efficiently manage oVirt's storage-defined storage. services/etcd-client.xml000064400000000460151464212450011310 0ustar00 etcd Client etcd implements a distributed key value store that provides a reliably way to store data across a cluster of machines. This is the client side port. services/ms-wbt.xml000064400000000276151464212450010333 0ustar00 ms-wbt Microsoft Windows-based Terminal Server services/transmission-client.xml000064400000000364151464212450013125 0ustar00 Transmission Transmission is a lightweight BitTorrent client. services/freeipa-trust.xml000064400000001221151464212450011703 0ustar00 FreeIPA trust setup FreeIPA is an LDAP and Kerberos domain controller for Linux systems. Enable this option of you plan to deploy cross-forest trusts with FreeIPA and Active Directory services/ipp.xml000064400000000653151464212450007711 0ustar00 Network Printing Server (IPP) The Internet Printing Protocol (IPP) is used for distributed printing. IPP (over tcp) provides the ability to share printers over the network. Enable this option if you plan to share printers via cups over the network. services/pmproxy.xml000064400000000732151464212450010635 0ustar00 Performance metrics proxy (pmproxy) This option allows indirect PCP (Performance Co-Pilot) monitoring via a proxy. If you need to allow remote hosts to connect through your machine to monitor aspects of performance of one or more proxied hosts, enable this option. You need the pcp package installed for this option to be useful. services/http.xml000064400000000541151464212450010074 0ustar00 WWW (HTTP) HTTP is the protocol used to serve Web pages. If you plan to make your Web server publicly available, enable this option. This option is not required for viewing pages locally or developing Web pages. services/mountd.xml000064400000000323151464212450010421 0ustar00 mountd NFS Mount Lock Daemon services/imaps.xml000064400000000564151464212450010233 0ustar00 IMAP over SSL The Internet Message Access Protocol over SSL (IMAPs) allows a local client to access email on a remote server in a secure way. If you plan to provide a IMAP over SSL service (e.g. with dovecot), enable this option. services/jenkins.xml000064400000000325151464212450010556 0ustar00 jenkins Jenkins is an open source automation server written in Java. services/pulseaudio.xml000064400000000636151464212450011274 0ustar00 PulseAudio A PulseAudio server provides an ability to stream audio over network. You want to enable this service in case you are using module-native-protocol-tcp in the PulseAudio configuration. If you are using module-zeroconf-publish you want also enable mdns service. services/tor-socks.xml000064400000001403151464212450011037 0ustar00 Tor - SOCKS Proxy Tor enables online anonymity and censorship resistance by directing Internet traffic through a network of relays. It conceals user's location from anyone conducting network surveillance and traffic analysis. A user wishing to use Tor for anonymity can configure a program such as a web browser to direct traffic to a Tor client using its SOCKS proxy port. Enable this if you run Tor and would like to configure your web browser or other programs to channel their traffic through the Tor SOCKS proxy port. It is recommended that you make this service available only for your computer or your internal networks. services/kpasswd.xml000064400000000335151464212450010572 0ustar00 Kpasswd Kerberos password (Kpasswd) server services/spideroak-lansync.xml000064400000000625151464212450012546 0ustar00 SpiderOak ONE LAN-Sync SpiderOak ONE is online backup and file hosting service that allows users to access, synchronize and share data using a cloud-based server. Enable this option if you use LAN-Sync option of SpiderOak. services/svn.xml000064400000000347151464212450007727 0ustar00 Subversion The custom, unencrypted protocol used the Subversion Version Control System. services/slp.xml000064400000000453151464212450007715 0ustar00 SLP The Service Location Protocol (SLP) is used for discovering services in a local network without prior configuration. services/wsman.xml000064400000000474151464212450010247 0ustar00 wsman Web Services for Management (WSMAN) is a protocol for managing PCs, servers, devices, Web services and other applications. This variant of the protocol is unencrypted services/elasticsearch.xml000064400000000522151464212450011726 0ustar00 Elasticsearch Elasticsearch is a distributed, open source search and analytics engine, designed for horizontal scalability, reliability, and easy management. services/freeipa-replication.xml000064400000000362151464212450013040 0ustar00 FreeIPA replication (deprecated) This service is deprecated. Please use freeipa-4 service instead. services/gre.xml000064400000000167151464212450007676 0ustar00 services/git.xml000064400000000324151464212450007677 0ustar00 git The git daemon for supporting git:// access to git repositories. services/mqtt-tls.xml000064400000000450151464212450010701 0ustar00 mqtt-tls The Message Queuing Telemetry Transport (MQTT) is a machine-to-machine connectivity protocol. This variant of the protocol uses TLS encryption. services/lightning-network.xml000064400000000415151464212450012567 0ustar00 Lightning Network The default port used by Lightning Network. Enable this option if you plan to be a Lightning Network node. services/amanda-client.xml000064400000000617151464212450011616 0ustar00 Amanda Backup Client The Amanda backup client option allows you to connect to a Amanda backup and archiving server. You need the amanda-client package installed for this option to be useful. services/iscsi-target.xml000064400000000410151464212450011506 0ustar00 iSCSI target Internet SCSI target is a storage resource located on an iSCSI server. services/freeipa-4.xml000064400000001305151464212450010670 0ustar00 FreeIPA 4 server FreeIPA is an integrated identity and authentication solution with Kerberos, LDAP, PKI, and web UI. Enable this option if you plan to provide a FreeIPA server. Enable the 'dns' service if this FreeIPA server provides DNS services, 'ntp' service if this FreeIPA server provides NTP services, and 'freeipa-trust' for cross-forest trusts with Active Directory. services/foreman.xml000064400000000630151464212450010543 0ustar00 foreman Foreman is a complete lifecycle management tool for physical and virtual servers. services/tinc.xml000064400000000520151464212450010047 0ustar00 tinc VPN tinc is a Virtual Private Network (VPN) daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet. services/amanda-k5-client.xml000064400000000653151464212450012133 0ustar00 Amanda Backup Client (kerberized) The Amanda backup client option allows you to connect to a Amanda backup and archiving server. You need the amanda-client package installed for this option to be useful. This service specifically allows krb5 authentication services/samba.xml000064400000000700151464212450010175 0ustar00 Samba This option allows you to access and participate in Windows file and printer sharing networks. You need the samba package installed for this option to be useful. services/ssdp.xml000064400000000645151464212450010073 0ustar00 Simple Service Discovery Protocol (SSDP) The Simple Service Discovery Protocol (SSDP) is a network protocol based on the Internet protocol suite for advertisement and discovery of network services and presence information. services/bb.xml000064400000000655151464212450007506 0ustar00 Big Brother Big Brother is a plain text protocol for sending and receiving client data, reports, and queries to a BB-compatible monitoring server or proxy. The standard IANA port for a listening Big Brother service is 1984, because of course it is. services/finger.xml000064400000000340151464212450010364 0ustar00 finger Finger is a protocol for obtaining information about users on remote hosts. services/ptp.xml000064400000000650151464212450007721 0ustar00 Precision Time Protocol (PTP) Master The Precision Time Protocol (PTP) allows to synchronize computers to a time master. Enable this option, if you are providing a PTP master. You need the linuxptp package installed for this option to be useful. services/tentacle.xml000064400000000374151464212450010720 0ustar00 tentacle Tentacle is a protocol for monitoring computer networks. Pandora FMS is one server implementation. services/etcd-server.xml000064400000000460151464212450011340 0ustar00 etcd Server etcd implements a distributed key value store that provides a reliably way to store data across a cluster of machines. This is the server side port. services/memcache.xml000064400000000365151464212450010663 0ustar00 memcache memcache is a high-performance object caching system. helpers/netbios-ns.xml000064400000000215151464212450011013 0ustar00 helpers/Q.931.xml000064400000000172151464212450007447 0ustar00 helpers/proto-gre.xml000064400000000132151464212450010646 0ustar00 helpers/tftp.xml000064400000000170151464212450007707 0ustar00 helpers/amanda.xml000064400000000175151464212450010160 0ustar00 helpers/sip.xml000064400000000236151464212450007530 0ustar00 helpers/ftp.xml000064400000000167151464212450007531 0ustar00 helpers/snmp.xml000064400000000207151464212450007710 0ustar00 helpers/h323.xml000064400000000125151464212450007411 0ustar00 helpers/irc.xml000064400000000206151464212450007507 0ustar00 helpers/sane.xml000064400000000172151464212450007662 0ustar00 helpers/pptp.xml000064400000000210151464212450007710 0ustar00 helpers/RAS.xml000064400000000172151464212450007361 0ustar00