helpers/sane.xml 0000644 00000000172 15173504155 0007664 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_sane">
<port protocol="tcp" port="6566"/>
</helper>
helpers/netbios-ns.xml 0000644 00000000215 15173504155 0011015 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_netbios_ns" family="ipv4">
<port protocol="udp" port="137"/>
</helper>
helpers/h323.xml 0000644 00000000125 15173504156 0007414 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_h323">
</helper>
helpers/ftp.xml 0000644 00000000167 15173504156 0007534 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_ftp">
<port protocol="tcp" port="21"/>
</helper>
helpers/pptp.xml 0000644 00000000210 15173504156 0007713 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_pptp" family="ipv4">
<port protocol="tcp" port="1723"/>
</helper>
helpers/irc.xml 0000644 00000000206 15173504156 0007512 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_irc" family="ipv4">
<port protocol="tcp" port="194"/>
</helper>
helpers/sip.xml 0000644 00000000236 15173504156 0007533 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_sip">
<port protocol="tcp" port="5060"/>
<port protocol="udp" port="5060"/>
</helper>
helpers/amanda.xml 0000644 00000000175 15173504156 0010163 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_amanda">
<port protocol="udp" port="10080"/>
</helper>
helpers/Q.931.xml 0000644 00000000172 15173504156 0007452 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_h323">
<port protocol="tcp" port="1720"/>
</helper>
helpers/proto-gre.xml 0000644 00000000132 15173504156 0010651 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_proto_gre">
</helper>
helpers/RAS.xml 0000644 00000000172 15173504156 0007364 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_h323">
<port protocol="udp" port="1719"/>
</helper>
helpers/tftp.xml 0000644 00000000170 15173504156 0007712 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_tftp">
<port protocol="udp" port="69"/>
</helper>
helpers/snmp.xml 0000644 00000000207 15173504156 0007713 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<helper module="nf_conntrack_snmp" family="ipv4">
<port protocol="udp" port="161"/>
</helper>
icmptypes/protocol-unreachable.xml 0000644 00000000371 15173504156 0013423 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Protocol Unreachable</short>
<description>This message is sent if the destination protocol is unreachable.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/redirect.xml 0000644 00000000271 15173504156 0011113 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Redirect</short>
<description>This error message informs a host to send packets on another route.</description>
</icmptype>
icmptypes/port-unreachable.xml 0000644 00000000351 15173504156 0012544 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Port Unreachable</short>
<description>This error message is sent if the port unreachable.</description>
<destination ipv4="yes"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/unknown-header-type.xml 0000644 00000000403 15173504156 0013213 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Unknown Header Type</short>
<description>This error message is sent if an unrecognized Next Header type encountered.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/unknown-option.xml 0000644 00000000371 15173504156 0012320 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Unknown Option</short>
<description>This error message is sent if an unrecognized IPv6 option encountered.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/router-solicitation.xml 0000644 00000000337 15173504156 0013334 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Router Solicitation</short>
<description>This message is used by a host attached to a multicast link to request a Router Advertisement.</description>
</icmptype>
icmptypes/tos-host-redirect.xml 0000644 00000000402 15173504156 0012665 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>TOS Host Redirect</short>
<description>This message is the datagram is redirected for the type of service and host.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/tos-host-unreachable.xml 0000644 00000000401 15173504156 0013334 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>TOS Host Unreachable</short>
<description>This message is sent if the host is unreachable for the type of service.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/packet-too-big.xml 0000644 00000000510 15173504156 0012113 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Packet Too Big</short>
<description>This error message is sent by a router in response to a packet that it cannot forward because the packet is larger than the MTU of the outgoing link.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/echo-request.xml 0000644 00000000322 15173504156 0011713 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Echo Request (ping)</short>
<description>This message is used to test if a host is reachable mostly with the ping utility.</description>
</icmptype>
icmptypes/ttl-zero-during-transit.xml 0000644 00000000400 15173504156 0014034 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>TTL Zero During Transit</short>
<description>This error message is sent if the time to live exceeded in transit.</description>
<destination ipv4="yes"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/no-route.xml 0000644 00000000357 15173504157 0011070 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>No Route</short>
<description>This error message is set if there is no route to the destination.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/mld-listener-query.xml 0000644 00000000461 15173504157 0013056 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>MLD Listener Query</short>
<description>ICMPv6 Link-Local Multicast Listener Discovery (MDL) of type Multicast Listener Query (type 130) (RFC 4890 section 4.4.1).</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/network-redirect.xml 0000644 00000000370 15173504157 0012603 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Network Redirect</short>
<description>This message is sent if the datagram is redirected for the network.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/mld-listener-report.xml 0000644 00000000463 15173504157 0013226 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>MLD Listener Report</short>
<description>ICMPv6 Link-Local Multicast Listener Discovery (MDL) of type Multicast Listener Report (type 131) (RFC 4890 section 4.4.1).</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/host-unknown.xml 0000644 00000000357 15173504157 0011772 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Host Unknown</short>
<description>This error message is sent if the destination host is unknown.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/mld2-listener-report.xml 0000644 00000000501 15173504157 0013301 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>MLDv2 Multicast Listener Report</short>
<description>ICMPv6 Link-Local Multicast Listener Discovery (MDLv2) of type Multicast Listener Report (type 143) (RFC 4890 section 4.4.1).</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/tos-network-redirect.xml 0000644 00000000420 15173504157 0013402 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>TOS Network Redirect</short>
<description>This message is sent if the datagram is redirected for the type of service and network.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/required-option-missing.xml 0000644 00000000361 15173504157 0014110 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Required Option Missing</short>
<description>This message is sent if a required option is missing.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/parameter-problem.xml 0000644 00000000341 15173504157 0012727 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Parameter Problem</short>
<description>This error message is generated if the IP header is bad, either by a missing option or bad length.</description>
</icmptype>
icmptypes/reject-route.xml 0000644 00000000364 15173504157 0011726 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Reject Route</short>
<description>This error message is sent if the route to destination is rejected.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/destination-unreachable.xml 0000644 00000000336 15173504157 0014105 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Destination Unreachable</short>
<description>This error message is generated by a host or gateway if the destination is not reachable.</description>
</icmptype>
icmptypes/router-advertisement.xml 0000644 00000000343 15173504157 0013503 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Router Advertisement</short>
<description>This message is used by routers to periodically announce the IP address of a multicast interface.</description>
</icmptype>
icmptypes/network-prohibited.xml 0000644 00000000372 15173504157 0013135 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Network Prohibited</short>
<description>This message is sent if the network is administratively prohibited.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/communication-prohibited.xml 0000644 00000000427 15173504157 0014312 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Communication Prohibited</short>
<description>This error message is sent if communication with destination administratively prohibited.</description>
<destination ipv4="yes"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/ip-header-bad.xml 0000644 00000000345 15173504157 0011677 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Ip Header Bad</short>
<description>This error message is sent if the IP header is bad.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/network-unreachable.xml 0000644 00000000367 15173504157 0013261 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Network Unreachable</short>
<description>This message is sent if the destination network is unreachable.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/host-precedence-violation.xml 0000644 00000000412 15173504157 0014362 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Host Precedence Violation</short>
<description>This error message is sent if the communication administratively prohibited.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/source-route-failed.xml 0000644 00000000354 15173504160 0013165 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Source Route Failed</short>
<description>This message is sent if the source route has failed.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/address-unreachable.xml 0000644 00000000601 15173504160 0013176 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Address Unreachable</short>
<description>This error message is generated by a router, or by the IPv6 layer in the originating node, in response to a packet that cannot be delivered to its destination address for reasons other than congestion.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/beyond-scope.xml 0000644 00000000446 15173504160 0011700 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Beyond Scope</short>
<description>This error message is sent if transmitting a package whould cross a zone boundary of the scope of the source address.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/host-unreachable.xml 0000644 00000000367 15173504160 0012537 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Host Unreachable</short>
<description>This error message is sent if the destination host is unreachable.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/timestamp-reply.xml 0000644 00000000351 15173504160 0012440 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Timestamp Reply</short>
<description>This message is used to reply to a timestamp message.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/echo-reply.xml 0000644 00000000255 15173504160 0011356 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Echo Reply (pong)</short>
<description>This message is the answer to an Echo Request.</description>
</icmptype>
icmptypes/time-exceeded.xml 0000644 00000000375 15173504160 0012014 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Time Exceeded</short>
<description>This error message is generated if the time-to-live was exceeded either of a packet or of the reassembling of a fragmented packet.</description>
</icmptype>
icmptypes/precedence-cutoff.xml 0000644 00000000400 15173504160 0012660 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Precedence Cutoff</short>
<description>This message is sent if the precedence is lower than the required minimum.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/timestamp-request.xml 0000644 00000000344 15173504160 0012777 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Timestamp Request</short>
<description>This message is used for time synchronization.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/host-redirect.xml 0000644 00000000362 15173504160 0012062 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Host Redirect</short>
<description>This message is sent if the datagram is redirected for the host.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/fragmentation-needed.xml 0000644 00000000430 15173504160 0013362 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Fragmentation Needed</short>
<description>This error message is sent if fragmentation is required, and Don not Fragment (DF) flag is set.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/neighbour-advertisement.xml 0000644 00000000543 15173504160 0014141 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Neighbour Advertisement (Neighbor Advertisement)</short>
<description>This informational message is sent in response to a neighbour-solicitation message in order to (unreliably) propagate new information quickly.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/source-quench.xml 0000644 00000000370 15173504160 0012066 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Source Quench</short>
<description>This error message is generated to tell a host to reduce the pace at which it is sending packets.</description>
<destination ipv4="yes"/>
</icmptype>
icmptypes/ttl-zero-during-reassembly.xml 0000644 00000000445 15173504160 0014522 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>TTL Zero During Reassembly</short>
<description>This error message is sent if a host fails to reassemble a fragmented datagram within its time limit.</description>
<destination ipv4="yes"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/failed-policy.xml 0000644 00000000405 15173504160 0012025 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Failed Policy</short>
<description>This error message is generated if the source address failed ingress/egress policy.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/neighbour-solicitation.xml 0000644 00000000711 15173504161 0013766 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Neighbour Solicitation (Neighbor Solicitation)</short>
<description>This informational message is sent by a node to determine the link-layer address of a neighbor, or to verify that a neighbor is still reachable via a cached link-layer address. Neighbor Solicitations are also used for Duplicate Address Detection.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/tos-network-unreachable.xml 0000644 00000000415 15173504161 0014051 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>TOS Network Unreachable</short>
<description>This error message is sent if the network is unreachable for the type of service.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/host-prohibited.xml 0000644 00000000401 15173504161 0012405 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Host Prohibited</short>
<description>This error message is sent if access from a host administratively prohibited.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
icmptypes/mld-listener-done.xml 0000644 00000000534 15173504161 0012632 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>MLD Listener Done</short>
<description>ICMPv6 Link-Local Multicast Listener Discovery (MDL) of type Multicast Listener Done (type 132) (RFC 4890 section 4.4.1). Also known as mld-listener-reduction to nft.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/bad-header.xml 0000644 00000000402 15173504161 0011256 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Bad Header</short>
<description>This error message is created if there has been an error in the header of a packet.</description>
<destination ipv4="no"/>
<destination ipv6="yes"/>
</icmptype>
icmptypes/network-unknown.xml 0000644 00000000357 15173504161 0012501 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<icmptype>
<short>Network Unknown</short>
<description>This message is sent if the destination network is unknown.</description>
<destination ipv4="yes"/>
<destination ipv6="no"/>
</icmptype>
services/dhcpv6.xml 0000644 00000000352 15173504161 0010306 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>DHCPv6</short>
<description>This allows a DHCPv6 server to accept messages from DHCPv6 clients and relay agents.</description>
<port protocol="udp" port="547"/>
</service>
services/plex.xml 0000644 00000002000 15173504161 0010054 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>PLEX</short>
<description> Plex Media Server (PMS) is the back-end media server component of Plex.
It organizes audio (music) and visual (photos and videos) content from personal media
libraries and streams it to their player counterparts, either on the same machine,
the same local area network, or over the Internet. </description>
<port protocol="tcp" port="32400"/><port protocol="udp" port="32400"/> <!-- Plex media server access (required)> -->
<port protocol="tcp" port="32469"/><port protocol="udp" port="1900"/> <!-- Plex DLNA -->
<port protocol="tcp" port="3005"/><!-- plex home theater control (plex companion) -->
<port protocol="tcp" port="8324"/><!-- Roku control (plex companion) -->
<port protocol="udp" port="32410"/><!-- gdm discovery -->
<port protocol="udp" port="32412"/><!-- gdm discovery -->
<port protocol="udp" port="32413"/><!-- gdm discovery -->
<port protocol="udp" port="32414"/><!-- gdm discovery -->
</service>
services/mongodb.xml 0000644 00000000355 15173504161 0010544 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>mongodb</short>
<description>MongoDB is a free and open-source cross-platform document-oriented database program.</description>
<port protocol="tcp" port="27017"/>
</service>
services/klogin.xml 0000644 00000000371 15173504161 0010400 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>klogin</short>
<description>The kerberized rlogin server accepts BSD-style rlogin sessions, but uses Kerberos 5 authentication.</description>
<port port="543" protocol="tcp"/>
</service>
services/tentacle.xml 0000644 00000000374 15173504161 0010717 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>tentacle</short>
<description>Tentacle is a protocol for monitoring computer networks. Pandora FMS is one server implementation.</description>
<port protocol="tcp" port="41121"/>
</service>
services/openvpn.xml 0000644 00000000517 15173504162 0010605 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>OpenVPN</short>
<description>OpenVPN is a virtual private network (VPN) solution. It is used to create encrypted point-to-point tunnels between computers. If you plan to provide a VPN service, enable this option.</description>
<port protocol="udp" port="1194"/>
</service>
services/mssql.xml 0000644 00000000252 15173504162 0010253 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>mssql</short>
<description>Microsoft SQL Server</description>
<port protocol="tcp" port="1433"/>
</service>
services/zabbix-agent.xml 0000644 00000000472 15173504162 0011473 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Zabbix Agent</short>
<description>Zabbix is a mature and effortless enterprise-class open source monitoring solution for network monitoring and application monitoring of millions of metrics.</description>
<port protocol="tcp" port="10050"/>
</service>
services/sane.xml 0000644 00000000504 15173504162 0010042 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SANE network daemon (saned)</short>
<description>The SANE (Scanner Access Now Easy) daemon allows remote clients to access image acquisition devices available on the local host.</description>
<port protocol="tcp" port="6566"/>
<helper name="sane"/>
</service>
services/mqtt.xml 0000644 00000000437 15173504162 0010106 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>mqtt</short>
<description>The Message Queuing Telemetry Transport (MQTT) is a machine-to-machine connectivity protocol. This variant of the protocol is unencrypted.</description>
<port port="1883" protocol="tcp"/>
</service>
services/pop3.xml 0000644 00000000534 15173504162 0010000 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>POP-3</short>
<description>The Post Office Protocol version 3 (POP3) is a protocol to retrieve email from a remote server over a TCP/IP connection. Enable this option, if you plan to provide a POP3 service (e.g. with dovecot).</description>
<port protocol="tcp" port="110"/>
</service>
services/foreman-proxy.xml 0000644 00000000416 15173504162 0011724 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>foreman-proxy</short>
<description>The Smart Proxy is a project which provides a restful API to various sub-systems.</description>
<include service="foreman"/>
<port protocol="tcp" port="8443"/>
</service>
services/kprop.xml 0000644 00000000266 15173504162 0010254 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>kprop</short>
<description>Kerberos KDC Propagation Protocol</description>
<port protocol="tcp" port="754"/>
</service>
services/proxy-dhcp.xml 0000644 00000000405 15173504162 0011211 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Proxy DHCP</short>
<description>PXE redirection service (Proxy DHCP) responds to PXE clients and provides redirection to PXE boot servers.</description>
<port protocol="udp" port="4011"/>
</service>
services/telnet.xml 0000644 00000000611 15173504163 0010407 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Telnet</short>
<description>Telnet is a protocol for logging into remote machines. It is unencrypted, and provides little security from network snooping attacks. Enabling telnet is not recommended. You need the telnet-server package installed for this option to be useful.</description>
<port port="23" protocol="tcp"/>
</service>
services/ftp.xml 0000644 00000000551 15173504163 0007710 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>FTP</short>
<description>FTP is a protocol used for remote file transfer. If you plan to make your FTP server publicly available, enable this option. You need the vsftpd package installed for this option to be useful.</description>
<port protocol="tcp" port="21"/>
<helper name="ftp"/>
</service>
services/ipp.xml 0000644 00000000653 15173504163 0007712 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Network Printing Server (IPP)</short>
<description>The Internet Printing Protocol (IPP) is used for distributed printing. IPP (over tcp) provides the ability to share printers over the network. Enable this option if you plan to share printers via cups over the network.</description>
<port protocol="tcp" port="631"/>
<port protocol="udp" port="631"/>
</service>
services/RH-Satellite-6.xml 0000644 00000001054 15173504163 0011516 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Red Hat Satellite 6</short>
<description>Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments.</description>
<include service="foreman"/>
<port protocol="tcp" port="5000"/>
<port protocol="tcp" port="5646-5647"/>
<port protocol="tcp" port="5671"/>
<port protocol="tcp" port="8000"/>
<port protocol="tcp" port="8080"/>
<port protocol="tcp" port="9090"/>
</service>
services/pop3s.xml 0000644 00000000545 15173504163 0010166 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>POP-3 over SSL</short>
<description>The Post Office Protocol version 3 (POP3) is a protocol to retrieve email from a remote server over a TCP/IP connection. Enable this option, if you plan to provide a POP3 service (e.g. with dovecot).</description>
<port protocol="tcp" port="995"/>
</service>
services/ganglia-master.xml 0000644 00000000260 15173504163 0012007 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>ganglia-master</short>
<description>Ganglia collector</description>
<port protocol="tcp" port="8651"/>
</service>
services/kadmin.xml 0000644 00000000266 15173504163 0010365 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>kadmin</short>
<description>Kerberos Administration Protocol</description>
<port protocol="tcp" port="749"/>
</service>
services/synergy.xml 0000644 00000000760 15173504164 0010622 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Synergy</short>
<description>Synergy lets you easily share your mouse and keyboard between multiple computers, where each computer has its own display. No special hardware is required, all you need is a local area network. Synergy is supported on Windows, Mac OS X and Linux. Redirecting the mouse and keyboard is as simple as moving the mouse off the edge of your screen.</description>
<port protocol="tcp" port="24800"/>
</service>
services/ldaps.xml 0000644 00000000350 15173504164 0010220 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>LDAPS</short>
<description>Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) server</description>
<port protocol="tcp" port="636"/>
</service>
services/ctdb.xml 0000644 00000000450 15173504164 0010032 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>CTDB</short>
<description>CTDB is a cluster implementation of the TDB database used by Samba and other projects to store temporary data.</description>
<port protocol="tcp" port="4379"/>
<port protocol="udp" port="4379"/>
</service>
services/nrpe.xml 0000644 00000000367 15173504164 0010071 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>NRPE</short>
<description>NRPE allows you to execute Nagios plugins on a remote host in as transparent a manner as possible.</description>
<port protocol="tcp" port="5666"/>
</service>
services/vnc-server.xml 0000644 00000000733 15173504164 0011214 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Virtual Network Computing Server (VNC)</short>
<description>A VNC server provides an external accessible X session. Enable this option if you plan to provide a VNC server with direct access. The access will be possible for displays :0 to :3. If you plan to provide access with SSH, do not open this option and use the via option of the VNC viewer.</description>
<port protocol="tcp" port="5900-5903"/>
</service>
services/galera.xml 0000644 00000000444 15173504164 0010354 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Galera</short>
<description>MariaDB-Galera Database Server</description>
<port protocol="tcp" port="3306"/>
<port protocol="tcp" port="4567"/>
<port protocol="tcp" port="4568"/>
<port protocol="tcp" port="4444"/>
</service>
services/syslog-tls.xml 0000644 00000000674 15173504164 0011246 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>syslog-tls</short>
<description>Syslog is a client/server protocol: a logging application transmits a text message to the syslog receiver. The receiver is commonly called syslogd, syslog daemon or syslog server. Syslog-tls uses TLS encryption to protect the messages during transport.</description>
<port protocol="tcp" port="6514"/>
<port protocol="udp" port="6514"/>
</service>
services/radius.xml 0000644 00000001010 15173504164 0010376 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>RADIUS</short>
<description>The Remote Authentication Dial In User Service (RADIUS) is a protocol for user authentication over networks. It is mostly used for modem, DSL or wireless user authentication. If you plan to provide a RADIUS service (e.g. with freeradius), enable this option.</description>
<port protocol="tcp" port="1812"/>
<port protocol="udp" port="1812"/>
<port protocol="tcp" port="1813"/>
<port protocol="udp" port="1813"/>
</service>
services/freeipa-4.xml 0000644 00000001305 15173504164 0010672 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>FreeIPA 4 server</short>
<description>FreeIPA is an integrated identity and authentication solution with Kerberos, LDAP, PKI, and web UI. Enable this option if you plan to provide a FreeIPA server. Enable the 'dns' service if this FreeIPA server provides DNS services, 'ntp' service if this FreeIPA server provides NTP services, and 'freeipa-trust' for cross-forest trusts with Active Directory.</description>
<!-- CRL and OCSP -->
<include service="http"/>
<!-- API and web UI -->
<include service="https"/>
<include service="kerberos"/>
<include service="kpasswd"/>
<include service="ldap"/>
<include service="ldaps"/>
</service>
services/irc.xml 0000644 00000000367 15173504165 0007703 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>IRC</short>
<description>An IRCd, short for Internet Relay Chat daemon, is server software that implements the IRC protocol.</description>
<port protocol="tcp" port="6667"/>
</service>
services/sip.xml 0000644 00000000760 15173504165 0007716 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SIP</short>
<description>The Session Initiation Protocol (SIP) is a communications protocol for signaling and controlling multimedia communication sessions. The most common applications of SIP are in Internet telephony for voice and video calls, as well as instant messaging, over Internet Protocol (IP) networks.</description>
<port protocol="tcp" port="5060"/>
<port protocol="udp" port="5060"/>
<helper name="sip"/>
</service>
services/zabbix-server.xml 0000644 00000000473 15173504165 0011707 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Zabbix Server</short>
<description>Zabbix is a mature and effortless enterprise-class open source monitoring solution for network monitoring and application monitoring of millions of metrics.</description>
<port protocol="tcp" port="10051"/>
</service>
services/mosh.xml 0000644 00000000731 15173504165 0010067 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Mobile shell that supports roaming and intelligent local echo.</short>
<description>Mosh is a remote terminal application that supports intermittent network connectivity, roaming to different IP address without dropping the connection, intelligent local echo and line editing to reduct the effects of "network lag" on high-latency connections.</description>
<port protocol="udp" port="60000-61000"/>
</service>
services/nfs.xml 0000644 00000000504 15173504165 0007705 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>NFS4</short>
<description>The NFS4 protocol is used to share files via TCP networking. You will need to have the NFS tools installed and properly configure your NFS server for this option to be useful.</description>
<port protocol="tcp" port="2049"/>
</service>
services/sips.xml 0000644 00000000433 15173504165 0010076 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SIP-TLS (SIPS)</short>
<description>SIP-TLS is a modified SIP (Session Initiation Protocol) using TLS for secure signaling.</description>
<port protocol="tcp" port="5061"/>
<port protocol="udp" port="5061"/>
</service>
services/bacula-client.xml 0000644 00000000500 15173504165 0011616 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Bacula Client</short>
<description>This option allows a Bacula server to connect to the local machine to schedule backups. You need the bacula-client package installed for this option to be useful.</description>
<port protocol="tcp" port="9102"/>
</service>
services/privoxy.xml 0000644 00000000775 15173504165 0010651 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Privoxy - A Privacy Enhancing Proxy Server</short>
<description>Privoxy is a web proxy for enhancing privacy by filtering web page content, managing cookies, controlling access, removing ads, banners, pop-ups and other obnoxious Internet junk. It does not cache web content. Enable this if you run Privoxy and would like to configure your web browser to browse the Internet via Privoxy.</description>
<port protocol="tcp" port="8118"/>
</service>
services/amqps.xml 0000644 00000000433 15173504166 0010242 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>amqps</short>
<description>The Advanced Message Queuing Protocol (AMQP) over SSL is an open standard application layer protocol for message-oriented middleware.</description>
<port protocol="tcp" port="5671"/>
</service>
services/smtp-submission.xml 0000644 00000000347 15173504166 0012301 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Mail (SMTP-Submission)</short>
<description>SMTP-Submission allows remote users to submit mail over port 587.</description>
<port protocol="tcp" port="587"/>
</service>
services/redis.xml 0000644 00000000414 15173504166 0010226 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>redis</short>
<description>Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.</description>
<port protocol="tcp" port="6379"/>
</service>
services/transmission-client.xml 0000644 00000000364 15173504166 0013131 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Transmission</short>
<description>Transmission is a lightweight BitTorrent client.</description>
<port protocol="tcp" port="51413"/>
<port protocol="udp" port="51413"/>
</service>
services/amqp.xml 0000644 00000000421 15173504166 0010054 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>amqp</short>
<description>The Advanced Message Queuing Protocol (AMQP) is an open standard application layer protocol for message-oriented middleware.</description>
<port protocol="tcp" port="5672"/>
</service>
services/cockpit.xml 0000644 00000000323 15173504166 0010553 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Cockpit</short>
<description>Cockpit lets you access and configure your server remotely.</description>
<port protocol="tcp" port="9090"/>
</service>
services/nbd.xml 0000644 00000000372 15173504166 0007666 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>NBD</short>
<description>Network Block Device (NBD) is a high-performance protocol for exporting disk images between machines.</description>
<port protocol="tcp" port="10809"/>
</service>
services/xmpp-client.xml 0000644 00000000750 15173504166 0011363 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>XMPP (Jabber) client</short>
<description>Extensible Messaging and Presence Protocol (XMPP) client connection protocol allows XMPP (Jabber) clients such as Empathy, Pidgin, Kopete and Jitsi to connect to an XMPP (Jabber) server. Enable this if you run an XMPP (Jabber) server and you wish clients to be able to connect to the server and communicate with each other.</description>
<port protocol="tcp" port="5222"/>
</service>
services/dhcp.xml 0000644 00000000343 15173504166 0010037 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>DHCP</short>
<description>This allows a DHCP server to accept messages from DHCP clients and relay agents.</description>
<port protocol="udp" port="67"/>
</service>
services/ptp.xml 0000644 00000000650 15173504167 0007726 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Precision Time Protocol (PTP) Master</short>
<description>The Precision Time Protocol (PTP) allows to synchronize computers to a time master. Enable this option, if you are providing a PTP master. You need the linuxptp package installed for this option to be useful.</description>
<port protocol="udp" port="319"/>
<port protocol="udp" port="320"/>
</service>
services/elasticsearch.xml 0000644 00000000522 15173504167 0011733 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Elasticsearch</short>
<description>Elasticsearch is a distributed, open source search and analytics engine, designed for horizontal scalability, reliability, and easy management.</description>
<port protocol="tcp" port="9300"/>
<port protocol="tcp" port="9200"/>
</service>
services/kshell.xml 0000644 00000000362 15173504167 0010405 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>kshell</short>
<description>Kerberized rshell server accepts rshell commands authenticated and encrypted with Kerberos 5</description>
<port port="544" protocol="tcp"/>
</service>
services/isns.xml 0000644 00000000546 15173504167 0010103 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>iSNS</short>
<description>The Internet Storage Name Service (iSNS) is a protocol that allows automated discovery, management and configuration of iSCSI and Fibre Channel devices on a TCP/IP network.</description>
<port port="3205" protocol="tcp"/>
<port port="3205" protocol="udp"/>
</service>
services/smtp.xml 0000644 00000001046 15173504167 0010106 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Mail (SMTP)</short>
<description>This option allows incoming SMTP mail delivery. If you need to allow remote hosts to connect directly to your machine to deliver mail, enable this option. You do not need to enable this if you collect your mail from your ISP's server by POP3 or IMAP, or if you use a tool such as fetchmail. Note that an improperly configured SMTP server can allow remote machines to use your server to send spam.</description>
<port protocol="tcp" port="25"/>
</service>
services/ceph.xml 0000644 00000000511 15173504167 0010036 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>ceph</short>
<description>Ceph is a distributed object store and file system. Enable this option to support Ceph's Object Storage Daemons (OSD), Metadata Server Daemons (MDS), or Manager Daemons (MGR).</description>
<port protocol="tcp" port="6800-7568"/>
</service>
services/bb.xml 0000644 00000000655 15173504167 0007513 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Big Brother</short>
<description>Big Brother is a plain text protocol for sending and receiving client data, reports, and queries to a BB-compatible monitoring server or proxy. The standard IANA port for a listening Big Brother service is 1984, because of course it is.</description>
<port protocol="tcp" port="1984"/>
<port protocol="udp" port="1984"/>
</service>
services/nfs3.xml 0000644 00000000526 15173504167 0007776 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>NFS3</short>
<description>The NFS3 protocol is used to share files. You will need to have the NFS tools installed and properly configure your NFS server for this option to be useful.</description>
<port protocol="tcp" port="2049"/>
<port protocol="udp" port="2049"/>
</service>
services/libvirt-tls.xml 0000644 00000000601 15173504170 0011364 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Virtual Machine Management (TLS)</short>
<description>Enable this option if you want to allow remote virtual machine management with TLS encryption, x509 certificates and optional SASL authentication. The libvirtd service is needed for this option to be useful.</description>
<port protocol="tcp" port="16514"/>
</service>
services/squid.xml 0000644 00000000255 15173504170 0010243 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>squid</short>
<description>Squid HTTP proxy server</description>
<port protocol="tcp" port="3128"/>
</service>
services/minidlna.xml 0000644 00000000527 15173504170 0010713 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>MiniDLNA</short>
<description>MiniDLNA is a simple media server software with the aim to be fully compliant with DLNA/UPNP-AV clients. Enable this service if you run minidlna service.</description>
<port protocol="tcp" port="8200"/>
<port protocol="udp" port="1900"/>
</service>
services/samba-client.xml 0000644 00000000563 15173504170 0011457 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Samba Client</short>
<description>This option allows you to access Windows file and printer sharing networks. You need the samba-client package installed for this option to be useful.</description>
<port protocol="udp" port="137"/>
<port protocol="udp" port="138"/>
<helper name="netbios-ns"/>
</service>
services/pmwebapis.xml 0000644 00000001040 15173504170 0011076 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Secure performance metrics web API (pmwebapis)</short>
<description>This option allows web clients to use PCP (Performance Co-Pilot) monitoring services over a secure connection. If you need to allow remote web clients to connect to your machine to monitor aspects of its performance, and you consider that information to be sensitive, enable this option. You need the pcp package installed for this option to be useful.</description>
<port protocol="tcp" port="44324"/>
</service>
services/collectd.xml 0000644 00000000450 15173504170 0010704 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Collectd</short>
<description>Collectd is a monitoring system that allows metrics to be sent over the network. This rule allows incoming collectd traffic from remote boxes.</description>
<port protocol="udp" port="25826"/>
</service>
services/ms-wbt.xml 0000644 00000000276 15173504170 0010332 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>ms-wbt</short>
<description>Microsoft Windows-based Terminal Server</description>
<port protocol="tcp" port="3389"/>
</service>
services/iscsi-target.xml 0000644 00000000410 15173504170 0011505 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>iSCSI target</short>
<description>Internet SCSI target is a storage resource located on an iSCSI server.</description>
<port protocol="tcp" port="3260"/>
<port protocol="udp" port="3260"/>
</service>
services/ceph-mon.xml 0000644 00000000446 15173504170 0010626 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>ceph-mon</short>
<description>Ceph is a distributed object store and file system. Enable this option to support Ceph's Monitor Daemon.</description>
<port protocol="tcp" port="3300"/>
<port protocol="tcp" port="6789"/>
</service>
services/tile38.xml 0000644 00000000335 15173504170 0010225 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>tile38</short>
<description>Tile38 is a geospatial database, spatial index, and realtime geofence.</description>
<port protocol="tcp" port="9851"/>
</service>
services/mysql.xml 0000644 00000000253 15173504170 0010261 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>MySQL</short>
<description>MySQL Database Server</description>
<port protocol="tcp" port="3306"/>
</service>
services/high-availability.xml 0000644 00000001140 15173504171 0012500 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Red Hat High Availability</short>
<description>This allows you to use the Red Hat High Availability (previously named Red Hat Cluster Suite). Ports are opened for corosync, pcsd, pacemaker_remote, dlm and corosync-qnetd.</description>
<port protocol="tcp" port="2224"/>
<port protocol="tcp" port="3121"/>
<port protocol="tcp" port="5403"/>
<port protocol="udp" port="5404"/>
<port protocol="udp" port="5405-5412"/>
<port protocol="tcp" port="9929"/>
<port protocol="udp" port="9929"/>
<port protocol="tcp" port="21064"/>
</service>
services/bgp.xml 0000644 00000000523 15173504171 0007665 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>BGP service listen</short>
<description>Border Gateway Protocol (BGP) is a standardized exterior gateway protocol designed to exchange routing and reachability information among autonomous systems (AS) on the Internet</description>
<port protocol="tcp" port="179"/>
</service>
services/kerberos.xml 0000644 00000000351 15173504171 0010730 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Kerberos</short>
<description>Kerberos network authentication protocol server</description>
<port protocol="tcp" port="88"/>
<port protocol="udp" port="88"/>
</service>
services/prometheus.xml 0000644 00000000325 15173504171 0011310 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>prometheus</short>
<description>The Prometheus monitoring system and time series database.</description>
<port protocol="tcp" port="9090"/>
</service>
services/managesieve.xml 0000644 00000000535 15173504171 0011404 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>ManageSieve</short>
<description>The ManageSieve Protocol allows a local client to manage eMail sieve scripts on a remote server. If you plan to provide a ManageSieve service (e.g. with dovecot pigeonhole), enable this option.</description>
<port protocol="tcp" port="4190"/>
</service>
services/git.xml 0000644 00000000324 15173504171 0007677 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>git</short>
<description>The git daemon for supporting git:// access to git repositories.</description>
<port protocol="tcp" port="9418"/>
</service>
services/ovirt-vmconsole.xml 0000644 00000000353 15173504171 0012264 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>oVirt VM Console</short>
<description>oVirt VM Consoles enables secure access to virtual machine serial console.</description>
<port protocol="tcp" port="2223"/>
</service>
services/cfengine.xml 0000644 00000000250 15173504171 0010670 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>CFEngine</short>
<description>CFEngine server</description>
<port protocol="tcp" port="5308"/>
</service>
services/bitcoin-testnet-rpc.xml 0000644 00000000463 15173504171 0013015 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Bitcoin testnet RPC</short>
<description>Enable this option if you need access to the Bitcoin RPC interface running on the testnet. This is not required when connecting on localhost.</description>
<port protocol="tcp" port="18332"/>
</service>
services/ipsec.xml 0000644 00000001576 15173504171 0010231 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>IPsec</short>
<description>Internet Protocol Security (IPsec) is the standarized IETF VPN architecture defined in RFC 4301. IPsec is negotiated using the IKEv1 (RFC 2409) or IKEv2 (RFC 7296) protocol, which in itself uses encryption and authentication. IPsec provides Internet Protocol (IP) packet encryption and authentication. Both IKE and IPsec can be encapsulated in UDP (RFC 3948) or TCP (RFC 8229 to make it easier to traverse NAT. Enabling this service will enable IKE, IPsec and their encapsulation protocols and ports. Note that IKE and IPsec can also be configured to use non-default ports, but this is not common practise.</description>
<port protocol="ah" port=""/>
<port protocol="esp" port=""/>
<port protocol="udp" port="500"/>
<port protocol="udp" port="4500"/>
<port protocol="tcp" port="4500"/>
</service>
services/jenkins.xml 0000644 00000000325 15173504171 0010556 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>jenkins</short>
<description>Jenkins is an open source automation server written in Java.</description>
<port protocol="tcp" port="8080"/>
</service>
services/svn.xml 0000644 00000000347 15173504171 0007727 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Subversion</short>
<description>The custom, unencrypted protocol used the Subversion Version Control System.</description>
<port port="3690" protocol="tcp"/>
</service>
services/ganglia-client.xml 0000644 00000000270 15173504171 0011772 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>ganglia-client</short>
<description>Ganglia monitoring daemon</description>
<port protocol="tcp" port="8660"/>
</service>
services/freeipa-replication.xml 0000644 00000000362 15173504171 0013040 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>FreeIPA replication (deprecated)</short>
<description>This service is deprecated. Please use freeipa-4 service instead.</description>
<port protocol="tcp" port="7389"/>
</service>
services/smtps.xml 0000644 00000001101 15173504172 0010255 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Mail (SMTP over SSL)</short>
<description>This option allows incoming SMTPs mail delivery. If you need to allow remote hosts to connect directly to your machine to deliver mail in a secure way, enable this option. You do not need to enable this if you collect your mail from your ISP's server by POP3 or IMAP, or if you use a tool such as fetchmail. Note that an improperly configured SMTP server can allow remote machines to use your server to send spam.</description>
<port protocol="tcp" port="465"/>
</service>
services/freeipa-trust.xml 0000644 00000001221 15173504172 0011704 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>FreeIPA trust setup</short>
<description>FreeIPA is an LDAP and Kerberos domain controller for Linux systems. Enable this option of you plan to deploy cross-forest trusts with FreeIPA and Active Directory</description>
<port protocol="tcp" port="135"/>
<port protocol="tcp" port="138-139"/>
<port protocol="udp" port="138-139"/>
<port protocol="tcp" port="389"/>
<port protocol="udp" port="389"/>
<port protocol="tcp" port="445"/>
<port protocol="udp" port="445"/>
<port protocol="tcp" port="49152-65535"/><!-- Dynamic RPC Ports -->
<port protocol="tcp" port="3268"/>
</service>
services/ssh.xml 0000644 00000000717 15173504172 0007720 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SSH</short>
<description>Secure Shell (SSH) is a protocol for logging into and executing commands on remote machines. It provides secure encrypted communications. If you plan on accessing your machine remotely via SSH over a firewalled interface, enable this option. You need the openssh-server package installed for this option to be useful.</description>
<port protocol="tcp" port="22"/>
</service>
services/bitcoin.xml 0000644 00000000364 15173504172 0010550 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Bitcoin</short>
<description>The default port used by Bitcoin. Enable this option if you plan to be a full Bitcoin node.</description>
<port protocol="tcp" port="8333"/>
</service>
services/samba-dc.xml 0000644 00000002422 15173504172 0010565 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Samba DC</short>
<description>This option allows you to use this computer as a Samba Active Directory Domain Controller. You need the samba-dc package installed for this option to be useful.</description>
<port protocol="tcp" port="53"/><!-- DNS -->
<port protocol="udp" port="53"/><!-- DNS -->
<port protocol="tcp" port="88"/><!-- Kerberos -->
<port protocol="udp" port="88"/><!-- Kerberos -->
<port protocol="tcp" port="135"/><!-- End Point Mapper (DCE/RPC Locator Service -->
<port protocol="udp" port="137"/><!-- NetBIOS Name Service -->
<port protocol="udp" port="138"/><!-- NetBIOS Datagram -->
<port protocol="tcp" port="139"/><!-- NetBIOS Session -->
<port protocol="tcp" port="389"/><!-- LDAP -->
<port protocol="udp" port="389"/><!-- CLDAP -->
<port protocol="tcp" port="445"/><!-- SMB over TCP -->
<port protocol="tcp" port="464"/><!-- Kerberos kpasswd -->
<port protocol="udp" port="464"/><!-- Kerberos kpasswd -->
<port protocol="tcp" port="636"/><!-- LDAPS -->
<port protocol="tcp" port="49152-65535"/><!-- Dynamic RPC Ports -->
<port protocol="tcp" port="3268"/><!-- Global Catalog -->
<port protocol="tcp" port="3269"/><!-- Global Catalog SSL -->
<helper name="netbios-ns"/>
</service>
services/etcd-server.xml 0000644 00000000460 15173504172 0011341 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>etcd Server</short>
<description>etcd implements a distributed key value store that provides a reliably way to store data across a cluster of machines. This is the server side port.</description>
<port port="2380" protocol="tcp"/>
</service>
services/dns.xml 0000644 00000000532 15173504173 0007703 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>DNS</short>
<description>The Domain Name System (DNS) is used to provide and request host and domain names. Enable this option, if you plan to provide a domain name service (e.g. with bind).</description>
<port protocol="tcp" port="53"/>
<port protocol="udp" port="53"/>
</service>
services/tinc.xml 0000644 00000000520 15173504173 0010051 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>tinc VPN</short>
<description>tinc is a Virtual Private Network (VPN) daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet.</description>
<port protocol="tcp" port="655"/>
<port protocol="udp" port="655"/>
</service>
services/gre.xml 0000644 00000000167 15173504173 0007700 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<protocol value="gre"/>
<helper name="proto-gre"/>
</service>
services/ovirt-storageconsole.xml 0000644 00000000527 15173504173 0013313 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>oVirt Storage-Console</short>
<description>oVirt Storage Console is a web-based storage management platform specially designed to efficiently manage oVirt's storage-defined storage.</description>
<port protocol="tcp" port="55863"/>
<port protocol="tcp" port="39543"/>
</service>
services/audit.xml 0000644 00000000455 15173504173 0010231 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Audit</short>
<description>The Linux Audit subsystem is used to log security events. Enable this option, if you plan to aggregate audit events to/from a remote server/client.</description>
<port protocol="tcp" port="60"/>
</service>
services/ldap.xml 0000644 00000000307 15173504173 0010037 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>LDAP</short>
<description>Lightweight Directory Access Protocol (LDAP) server</description>
<port protocol="tcp" port="389"/>
</service>
services/xmpp-bosh.xml 0000644 00000000775 15173504173 0011045 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>XMPP (Jabber) web client</short>
<description>Extensible Messaging and Presence Protocol (XMPP) web client protocol allows web based chat clients such as JWChat to connect to the XMPP (Jabber) server. This is also known as the Bidirectional-streams Over Synchronous HTTP (BOSH) protocol. Enable this if you run an XMPP (Jabber) server and you wish web clients to connect to your server.</description>
<port protocol="tcp" port="5280"/>
</service>
services/spotify-sync.xml 0000644 00000000423 15173504173 0011565 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Spotify Client Sync</short>
<description>The Spotify Client allows you to sync local music files with your phone.</description>
<port port="57621" protocol="udp"/>
<port port="57621" protocol="tcp"/>
</service>
services/freeipa-ldaps.xml 0000644 00000000751 15173504173 0011636 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>FreeIPA with LDAPS (deprecated)</short>
<description>This service is deprecated. Please use freeipa-4 service instead.</description>
<port protocol="tcp" port="80"/>
<port protocol="tcp" port="443"/>
<port protocol="tcp" port="88"/>
<port protocol="udp" port="88"/>
<port protocol="tcp" port="464"/>
<port protocol="udp" port="464"/>
<port protocol="udp" port="123"/>
<port protocol="tcp" port="636"/>
</service>
services/rdp.xml 0000644 00000000267 15173504173 0007711 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>rdp</short>
<description>Microsoft's Remote Desktop Protocol</description>
<port protocol="tcp" port="3389"/>
</service>
services/https.xml 0000644 00000000700 15173504173 0010256 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Secure WWW (HTTPS)</short>
<description>HTTPS is a modified HTTP used to serve Web pages when security is important. Examples are sites that require logins like stores or web mail. This option is not required for viewing pages locally or developing Web pages. You need the httpd package installed for this option to be useful.</description>
<port protocol="tcp" port="443"/>
</service>
services/postgresql.xml 0000644 00000000265 15173504173 0011325 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>PostgreSQL</short>
<description>PostgreSQL Database Server</description>
<port protocol="tcp" port="5432"/>
</service>
services/ovirt-imageio.xml 0000644 00000000404 15173504173 0011670 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>oVirt Image I/O</short>
<description>oVirt Image I/O simplifies the workflow of introducing new oVirt images into the oVirt environment.</description>
<port protocol="tcp" port="54322"/>
</service>
services/xdmcp.xml 0000644 00000000511 15173504173 0010227 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>XDMCP</short>
<description>The X Display Manager Control Protocol (XDMCP) allows to remotely log in to an X desktop environment from any X Window System compatible client.</description>
<port port="177" protocol="tcp"/>
<port port="177" protocol="udp"/>
</service>
services/pmcd.xml 0000644 00000000661 15173504173 0010045 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Performance metrics collector (pmcd)</short>
<description>This option allows PCP (Performance Co-Pilot) monitoring. If you need to allow remote hosts to connect directly to your machine to monitor aspects of its performance, enable this option. You need the pcp package installed for this option to be useful.</description>
<port protocol="tcp" port="44321"/>
</service>
services/ipp-client.xml 0000644 00000000706 15173504173 0011166 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Network Printing Client (IPP)</short>
<description>The Internet Printing Protocol (IPP) is used for distributed printing. IPP (over udp) provides the ability to get information about a printer (e.g. capability and status) and to control printer jobs. If you plan to use a remote network printer via cups, do not disable this option.</description>
<port protocol="udp" port="631"/>
</service>
services/llmnr.xml 0000644 00000000504 15173504173 0010242 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Link-Local Multicast Name Resolution (LLMNR)</short>
<description>LLMNR allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link.</description>
<port protocol="tcp" port="5355"/>
<port protocol="udp" port="5355"/>
</service>
services/ssdp.xml 0000644 00000000645 15173504173 0010075 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Simple Service Discovery Protocol (SSDP)</short>
<description>The Simple Service Discovery Protocol (SSDP) is a network protocol based on the Internet protocol suite for advertisement and discovery of network services and presence information.</description>
<port protocol="udp" port="1900"/>
<destination ipv4="239.255.255.250" ipv6="FF02::C"/>
</service>
services/bittorrent-lsd.xml 0000644 00000000632 15173504173 0012074 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>BitTorrent Local Peer Discovery (LSD)</short>
<description>Local Peer Discovery is a protocol designed to support the discovery of BitTorrent peers on a local area network. Enable this service if you run a BitTorrent client.</description>
<port protocol="udp" port="6771"/>
<destination ipv4="239.192.152.143" ipv6="ff15::efc0:988f"/>
</service>
services/xmpp-server.xml 0000644 00000001041 15173504173 0011403 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>XMPP (Jabber) server</short>
<description>Extensible Messaging and Presence Protocol (XMPP) server connection protocols allows multiple XMPP (Jabber) servers to work in a federated fashion. Users on one server will be able to see the presence of and communicate with users on another servers. Enable this if you run an XMPP (Jabber) server and you wish users on your server to communicate with users on other XMPP servers.</description>
<port protocol="tcp" port="5269"/>
</service>
services/foreman.xml 0000644 00000000630 15173504174 0010546 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>foreman</short>
<description>Foreman is a complete lifecycle management tool for physical and virtual servers.</description>
<include service="dns"/>
<include service="http"/>
<include service="https"/>
<include service="dhcp"/>
<include service="tftp"/>
<port protocol="udp" port="68"/>
<port protocol="tcp" port="8140"/>
</service>
services/libvirt.xml 0000644 00000000605 15173504174 0010574 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Virtual Machine Management</short>
<description>Enable this option if you want to allow remote virtual machine management with SASL authentication and encryption (digest-md5 passwords or GSSAPI/Kerberos). The libvirtd service is needed for this option to be useful.</description>
<port protocol="tcp" port="16509"/>
</service>
services/memcache.xml 0000644 00000000365 15173504174 0010666 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>memcache</short>
<description>memcache is a high-performance object caching system.</description>
<port protocol="tcp" port="11211"/>
<port protocol="udp" port="11211"/>
</service>
services/amanda-k5-client.xml 0000644 00000000653 15173504174 0012136 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Amanda Backup Client (kerberized)</short>
<description>The Amanda backup client option allows you to connect to a Amanda backup and archiving server. You need the amanda-client package installed for this option to be useful. This service specifically allows krb5 authentication</description>
<port protocol="tcp" port="10082"/>
<helper name="amanda"/>
</service>
services/upnp-client.xml 0000644 00000000410 15173504174 0011351 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>UPnP Client</short>
<description>Universal Plug and Play client for auto-configuration of network routers (use only in trusted zones).</description>
<source-port port="1900" protocol="udp"/>
</service>
services/rtsp.xml 0000644 00000000536 15173504174 0010114 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>RTSP</short>
<description>The Real Time Streaming Protocol (RTSP) is a network control protocol designed for use in entertainment and communications systems to control streaming media servers.</description>
<port port="554" protocol="tcp"/>
<port port="554" protocol="udp"/>
</service>
services/mqtt-tls.xml 0000644 00000000450 15173504174 0010704 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>mqtt-tls</short>
<description>The Message Queuing Telemetry Transport (MQTT) is a machine-to-machine connectivity protocol. This variant of the protocol uses TLS encryption.</description>
<port port="8883" protocol="tcp"/>
</service>
services/etcd-client.xml 0000644 00000000460 15173504174 0011313 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>etcd Client</short>
<description>etcd implements a distributed key value store that provides a reliably way to store data across a cluster of machines. This is the client side port.</description>
<port port="2379" protocol="tcp"/>
</service>
services/pulseaudio.xml 0000644 00000000636 15173504174 0011277 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>PulseAudio</short>
<description>A PulseAudio server provides an ability to stream audio over network. You want to enable this service in case you are using module-native-protocol-tcp in the PulseAudio configuration. If you are using module-zeroconf-publish you want also enable mdns service.</description>
<port protocol="tcp" port="4713"/>
</service>
services/docker-registry.xml 0000644 00000000566 15173504174 0012244 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Docker Registry</short>
<description>Docker Registry is the protocol used to serve Docker images. If you plan to make your Docker Registry server publicly available, enable this option. This option is not required for developing Docker images locally.</description>
<port protocol="tcp" port="5000"/>
</service>
services/dhcpv6-client.xml 0000644 00000000461 15173504174 0011567 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>DHCPv6 Client</short>
<description>This option allows a DHCP for IPv6 (DHCPv6) client to obtain addresses and other IPv6 settings from DHCPv6 server.</description>
<port protocol="udp" port="546"/>
<destination ipv6="fe80::/64"/>
</service>
services/freeipa-ldap.xml 0000644 00000000750 15173504174 0011453 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>FreeIPA with LDAP (deprecated)</short>
<description>This service is deprecated. Please use freeipa-4 service instead.</description>
<port protocol="tcp" port="80"/>
<port protocol="tcp" port="443"/>
<port protocol="tcp" port="88"/>
<port protocol="udp" port="88"/>
<port protocol="tcp" port="464"/>
<port protocol="udp" port="464"/>
<port protocol="udp" port="123"/>
<port protocol="tcp" port="389"/>
</service>
services/mdns.xml 0000644 00000000650 15173504174 0010062 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Multicast DNS (mDNS)</short>
<description>mDNS provides the ability to use DNS programming interfaces, packet formats and operating semantics in a small network without a conventional DNS server. If you plan to use Avahi, do not disable this option.</description>
<port protocol="udp" port="5353"/>
<destination ipv4="224.0.0.251" ipv6="ff02::fb"/>
</service>
services/wbem-https.xml 0000644 00000000466 15173504174 0011220 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>wbem-https</short>
<description>Web-Based Enterprise Management (WBEM) is a set of systems management technologies developed to unify the management of distributed computing environments</description>
<port protocol="tcp" port="5989"/>
</service>
services/kibana.xml 0000644 00000000600 15173504174 0010341 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Kibana</short>
<description>Kibana is an open source data visualization platform that allows you to interact with your data through stunning, powerful graphics that can be combined into custom dashboards that help you share insights from your data far and wide.</description>
<port protocol="tcp" port="5601"/>
</service>
services/amanda-client.xml 0000644 00000000617 15173504174 0011621 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Amanda Backup Client</short>
<description>The Amanda backup client option allows you to connect to a Amanda backup and archiving server. You need the amanda-client package installed for this option to be useful.</description>
<port protocol="udp" port="10080"/>
<port protocol="tcp" port="10080"/>
<helper name="amanda"/>
</service>
services/samba.xml 0000644 00000000700 15173504174 0010200 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Samba</short>
<description>This option allows you to access and participate in Windows file and printer sharing networks. You need the samba package installed for this option to be useful.</description>
<port protocol="udp" port="137"/>
<port protocol="udp" port="138"/>
<port protocol="tcp" port="139"/>
<port protocol="tcp" port="445"/>
<helper name="netbios-ns"/>
</service>
services/imaps.xml 0000644 00000000564 15173504174 0010236 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>IMAP over SSL</short>
<description>The Internet Message Access Protocol over SSL (IMAPs) allows a local client to access email on a remote server in a secure way. If you plan to provide a IMAP over SSL service (e.g. with dovecot), enable this option.</description>
<port protocol="tcp" port="993"/>
</service>
services/rpc-bind.xml 0000644 00000000326 15173504174 0010617 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>rpc-bind</short>
<description>Remote Procedure Call Bind</description>
<port protocol="tcp" port="111"/>
<port protocol="udp" port="111"/>
</service>
services/slp.xml 0000644 00000000453 15173504174 0007720 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SLP</short>
<description>The Service Location Protocol (SLP) is used for discovering services in a local network without prior configuration.</description>
<port port="427" protocol="tcp"/>
<port port="427" protocol="udp"/>
</service>
services/dns-over-tls.xml 0000644 00000000476 15173504174 0011464 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>DNS over TLS</short>
<description>DNS over TLS (DoT) is a security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol</description>
<port protocol="tcp" port="853"/>
</service>
services/steam-streaming.xml 0000644 00000001167 15173504174 0012225 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Steam In-Home Streaming</short>
<description>Steam in-home streaming allows you to play a game on one computer when the game process is actually running on another computer elsewhere in your home. Through Steam, game audio and video is captured on the remote computer and sent to the player's computer. The game input (keyboard, mouse or gamepad) is sent from the player's computer to the game process on the remote computer.</description>
<port protocol="tcp" port="27036"/>
<port protocol="tcp" port="27037"/>
<port protocol="udp" port="27031-27036"/>
</service>
services/rquotad.xml 0000644 00000000325 15173504174 0010577 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>rquotad</short>
<description>Remote Quota Server Daemon</description>
<port protocol="tcp" port="875"/>
<port protocol="udp" port="875"/>
</service>
services/kdeconnect.xml 0000644 00000000420 15173504174 0011231 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>KDE Connect</short>
<description>KDE Connect is an application to connect your phone to your computer.</description>
<port port="1714-1764" protocol="tcp"/>
<port port="1714-1764" protocol="udp"/>
</service>
services/kpasswd.xml 0000644 00000000335 15173504174 0010575 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Kpasswd</short>
<description>Kerberos password (Kpasswd) server</description>
<port protocol="tcp" port="464"/>
<port protocol="udp" port="464"/>
</service>
services/tftp.xml 0000644 00000000650 15173504174 0010076 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>TFTP</short>
<description>The Trivial File Transfer Protocol (TFTP) is a protocol used to transfer files to and from a remote machine in a simple way. It is normally used only for booting diskless workstations and also to transfer data in the Preboot eXecution Environment (PXE).</description>
<port protocol="udp" port="69"/>
<helper name="tftp"/>
</service>
services/spideroak-lansync.xml 0000644 00000000625 15173504174 0012551 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SpiderOak ONE LAN-Sync</short>
<description>SpiderOak ONE is online backup and file hosting service that allows users to access, synchronize and share data using a cloud-based server. Enable this option if you use LAN-Sync option of SpiderOak.</description>
<port protocol="udp" port="21327"/>
<port protocol="udp" port="21328"/>
</service>
services/wsman.xml 0000644 00000000474 15173504174 0010252 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>wsman</short>
<description>Web Services for Management (WSMAN) is a protocol for managing PCs, servers, devices, Web services and other applications. This variant of the protocol is unencrypted</description>
<port port="5985" protocol="tcp"/>
</service>
services/svdrp.xml 0000644 00000000437 15173504174 0010262 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SVDRP</short>
<description>The Simple Video Disk Recorder Protocol (SVDRP) allows to control video disk recorder functionality.</description>
<port port="6419" protocol="tcp"/>
<port port="6419" protocol="udp"/>
</service>
services/grafana.xml 0000644 00000000332 15173504174 0010515 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>grafana</short>
<description>Grafana is an open platform for beautiful analytics and monitoring</description>
<port protocol="tcp" port="3000"/>
</service>
services/pmproxy.xml 0000644 00000000732 15173504174 0010640 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Performance metrics proxy (pmproxy)</short>
<description>This option allows indirect PCP (Performance Co-Pilot) monitoring via a proxy. If you need to allow remote hosts to connect through your machine to monitor aspects of performance of one or more proxied hosts, enable this option. You need the pcp package installed for this option to be useful.</description>
<port protocol="tcp" port="44322"/>
</service>
services/dropbox-lansync.xml 0000644 00000000344 15173504174 0012243 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service version="1.0">
<short>dropboxlansync</short>
<description>Dropbox LAN sync</description>
<port protocol="udp" port="17500"/>
<port protocol="tcp" port="17500"/>
</service>
services/redis-sentinel.xml 0000644 00000000324 15173504175 0012045 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>redis-sentinel</short>
<description>Redis Sentinel provides high availability for Redis.</description>
<port protocol="tcp" port="26379"/>
</service>
services/matrix.xml 0000644 00000000660 15173504175 0010427 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Matrix</short>
<description>Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Port 443 is the 'client' port, whereas port 8448 is the Federation port. Federation is the process by which users on different servers can participate in the same room.</description>
<include service="https"/>
<port port="8448" protocol="tcp"/>
</service>
services/bitcoin-testnet.xml 0000644 00000000431 15173504175 0012232 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Bitcoin testnet</short>
<description>The default port used by Bitcoin testnet. Enable this option if you plan to be a Bitcoin full node on the test network.</description>
<port protocol="tcp" port="18333"/>
</service>
services/wbem-http.xml 0000644 00000000540 15173504175 0011027 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>wbem-http</short>
<description>Web-Based Enterprise Management (WBEM) is a set of systems management technologies developed to unify the management of distributed computing environments. This is the unencrypted protocol variant.</description>
<port protocol="tcp" port="5988"/>
</service>
services/docker-swarm.xml 0000644 00000000607 15173504175 0011522 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Docker integrated swarm mode</short>
<description>Natively managed cluster of Docker Engines (>=1.12.0), where you deploy services.</description>
<port port="2377" protocol="tcp"/>
<port port="7946" protocol="tcp"/>
<port port="7946" protocol="udp"/>
<port port="4789" protocol="udp"/>
<protocol value="esp"/>
</service>
services/salt-master.xml 0000644 00000000511 15173504175 0011352 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Salt Master</short>
<description>Salt is a protocol used for infrastructure management via a dynamic communication bus. These ports are required on the salt master node.</description>
<port port="4505" protocol="tcp"/>
<port port="4506" protocol="tcp"/>
</service>
services/syncthing-gui.xml 0000644 00000000451 15173504175 0011711 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Syncthing GUI</short>
<description>Enable this option in addition to the Syncthing option to allow traffic to the Syncthing web interface. (Be sure to secure it accordingly).</description>
<port protocol="tcp" port="8384"/>
</service>
services/puppetmaster.xml 0000644 00000000451 15173504175 0011652 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Puppet Master</short>
<description>Puppet is a network tool for managing many disparate systems. Puppet Master is a server which Puppet Agents pull their configurations from.</description>
<port protocol="tcp" port="8140"/>
</service>
services/condor-collector.xml 0000644 00000000404 15173504175 0012367 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>HT Condor Collector</short>
<description>The HT Condor Collector is needed to organize the condor worker nodes.</description>
<port protocol="tcp" port="9618"/> <!-- condor_collector -->
</service>
services/imap.xml 0000644 00000000507 15173504175 0010051 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>IMAP</short>
<description>The Internet Message Access Protocol(IMAP) allows a local client to access email on a remote server. If you plan to provide a IMAP service (e.g. with dovecot), enable this option.</description>
<port protocol="tcp" port="143"/>
</service>
services/quassel.xml 0000644 00000000421 15173504175 0010573 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Quassel IRC</short>
<description>Quassel is a distributed IRC client, meaning that one or more clients can attach to and detach from the central core.</description>
<port protocol="tcp" port="4242"/>
</service>
services/pmwebapi.xml 0000644 00000000714 15173504175 0010727 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Performance metrics web API (pmwebapi)</short>
<description>This option allows web clients to use PCP (Performance Co-Pilot) monitoring services. If you need to allow remote web clients to connect to your machine to monitor aspects of its performance, enable this option. You need the pcp package installed for this option to be useful.</description>
<port protocol="tcp" port="44323"/>
</service>
services/xmpp-local.xml 0000644 00000000410 15173504175 0011170 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>XMPP Link-Local Messaging</short>
<description>Serverless XMPP-like communication over local networks based on zero-configuration networking.</description>
<port protocol="tcp" port="5298"/>
</service>
services/ntp.xml 0000644 00000000605 15173504175 0007723 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Network Time Protocol (NTP) Server</short>
<description>The Network Time Protocol (NTP) allows to synchronize computers to a time server. Enable this option, if you are providing a NTP server. You need the ntp or chrony package installed for this option to be useful.</description>
<port protocol="udp" port="123"/>
</service>
services/syslog.xml 0000644 00000000511 15173504175 0010436 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>syslog</short>
<description>Syslog is a client/server protocol: a logging application transmits a text message to the syslog receiver. The receiver is commonly called syslogd, syslog daemon or syslog server.</description>
<port protocol="udp" port="514"/>
</service>
services/http.xml 0000644 00000000541 15173504175 0010100 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>WWW (HTTP)</short>
<description>HTTP is the protocol used to serve Web pages. If you plan to make your Web server publicly available, enable this option. This option is not required for viewing pages locally or developing Web pages.</description>
<port protocol="tcp" port="80"/>
</service>
services/tor-socks.xml 0000644 00000001403 15173504175 0011043 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Tor - SOCKS Proxy</short>
<description>Tor enables online anonymity and censorship resistance by directing Internet traffic through a network of relays. It conceals user's location from anyone conducting network surveillance and traffic analysis. A user wishing to use Tor for anonymity can configure a program such as a web browser to direct traffic to a Tor client using its SOCKS proxy port. Enable this if you run Tor and would like to configure your web browser or other programs to channel their traffic through the Tor SOCKS proxy port. It is recommended that you make this service available only for your computer or your internal networks.</description>
<port protocol="tcp" port="9050"/>
</service>
services/RH-Satellite-6-capsule.xml 0000644 00000000575 15173504175 0013162 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Red Hat Satellite 6 Capsule</short>
<description>Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments.</description>
<include service="RH-Satellite-6"/>
<port protocol="tcp" port="8443"/>
</service>
services/rsyncd.xml 0000644 00000000467 15173504175 0010432 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Rsync in daemon mode</short>
<description>Rsync in daemon mode works as a central server, in order to house centralized files and keep them synchronized.</description>
<port protocol="tcp" port="873"/>
<port protocol="udp" port="873"/>
</service>
services/vdsm.xml 0000644 00000001121 15173504175 0010065 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>oVirt's Virtual Desktop and Server Manager</short>
<description>The VDSM service is required by a Virtualization Manager to manage the Linux hosts. VDSM manages and monitors the host's storage, memory and networks as well as virtual machine creation, other host administration tasks, statistics gathering, and log collection.</description>
<port protocol="tcp" port="54321"/> <!-- vdsmd -->
<port protocol="tcp" port="5900-6923"/> <!-- guest consoles -->
<port protocol="tcp" port="49152-49216"/> <!-- migration -->
</service>
services/syncthing.xml 0000644 00000000536 15173504175 0011133 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Syncthing</short>
<description>Syncthing is a peer-to-peer file synchronization service. Enable this option, if you plan to run the Syncthing service.</description>
<port protocol="tcp" port="22000"/>
<port protocol="udp" port="22000"/>
<port protocol="udp" port="21027"/>
</service>
services/distcc.xml 0000644 00000000315 15173504175 0010371 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>distcc</short>
<description>Distcc is a protocol used for distributed compilation.</description>
<port port="3632" protocol="tcp"/>
</service>
services/lightning-network.xml 0000644 00000000415 15173504175 0012573 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Lightning Network</short>
<description>The default port used by Lightning Network. Enable this option if you plan to be a Lightning Network node.</description>
<port protocol="tcp" port="9735"/>
</service>
services/snmptrap.xml 0000644 00000000464 15173504175 0010771 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SNMPTRAP</short>
<description>SNMP traps enable an agent to notify the management station of significant events by way of an unsolicited SNMP message.</description>
<port protocol="tcp" port="162"/>
<port protocol="udp" port="162"/>
</service>
services/snmp.xml 0000644 00000000526 15173504176 0010102 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>SNMP</short>
<description>Simple Network Management Protocol is an "Internet-standard protocol for managing devices on IP networks". Enable this service if you run SNMP agent (server).</description>
<port protocol="tcp" port="161"/>
<port protocol="udp" port="161"/>
</service>
services/bacula.xml 0000644 00000000532 15173504176 0010351 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Bacula</short>
<description>Bacula is a network backup solution. Enable this option, if you plan to provide Bacula backup, file and storage services.</description>
<port protocol="tcp" port="9101"/>
<port protocol="tcp" port="9102"/>
<port protocol="tcp" port="9103"/>
</service>
services/nut.xml 0000644 00000000560 15173504176 0007731 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>NUT</short>
<description>Network UPS Tools (NUT) is a protocol that allows to monitor and control power devices like uninterruptible power supplies.</description>
<port port="3493" protocol="tcp"/>
<!-- <port port="3493" protocol="udp"/> according to upstream never really worked over UDP -->
</service>
services/bitcoin-rpc.xml 0000644 00000000423 15173504176 0011332 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Bitcoin RPC</short>
<description>Enable this option if you need access to the Bitcoin RPC interface. This is not required when connecting on localhost.</description>
<port protocol="tcp" port="8332"/>
</service>
services/finger.xml 0000644 00000000340 15173504176 0010371 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>finger</short>
<description>Finger is a protocol for obtaining information about users on remote hosts.</description>
<port port="79" protocol="tcp"/>
</service>
services/apcupsd.xml 0000644 00000000435 15173504176 0010563 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>apcupsd</short>
<description>The American Power Conversion (APC) uninterruptible power supply (UPS) daemon protocol allows to monitor and control APC UPS devices.</description>
<port port="3551" protocol="tcp"/>
</service>
services/wsmans.xml 0000644 00000000503 15173504176 0010430 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>wsmans</short>
<description>Web Services for Management (WSMAN) is a protocol for managing PCs, servers, devices, Web services and other applications. This variant of the protocol uses TLS encryption.</description>
<port port="5986" protocol="tcp"/>
</service>
services/murmur.xml 0000644 00000000362 15173504176 0010452 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Murmur</short>
<description>Murmur is the server of the Mumble VoIP chat system.</description>
<port protocol="tcp" port="64738"/>
<port protocol="udp" port="64738"/>
</service>
services/ircs.xml 0000644 00000000377 15173504176 0010071 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>IRC TLS/SSL</short>
<description>An IRCd, short for Internet Relay Chat daemon, is server software that implements the IRC protocol.</description>
<port protocol="tcp" port="6697"/>
</service>
services/nmea-0183.xml 0000644 00000000445 15173504176 0010436 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>nmea-0183</short>
<description>NMEA-0183 Navigational Data server for use with Global Navigation Satellite System (GNSS) devices.</description>
<port protocol="tcp" port="10110" />
<port protocol="udp" port="10110" />
</service>
services/kube-apiserver.xml 0000644 00000000464 15173504176 0012052 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>Kubernetes Api Server</short>
<description>The Kubernetes API server validates and configures data for the api objects which include pods, services, replicationcontrollers, and others.</description>
<port protocol="tcp" port="6443"/>
</service>
services/tftp-client.xml 0000644 00000000440 15173504176 0011351 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>TFTP Client</short>
<description>This option allows you to access Trivial File Transfer Protocol (TFTP) servers. You need the tftp package installed for this option to be useful.</description>
<helper name="tftp"/>
</service>
services/rsh.xml 0000644 00000000466 15173504176 0007724 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>rsh</short>
<description>Rsh is a protocol for logging into remote machines. It is unencrypted, and provides little security from network snooping attacks. Enabling rsh is not recommended.</description>
<port port="514" protocol="tcp"/>
</service>
services/mountd.xml 0000644 00000000323 15173504176 0010426 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<service>
<short>mountd</short>
<description>NFS Mount Lock Daemon</description>
<port protocol="tcp" port="20048"/>
<port protocol="udp" port="20048"/>
</service>
zones/public.xml 0000644 00000000527 15173504176 0007717 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone>
<short>Public</short>
<description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
<service name="ssh"/>
<service name="dhcpv6-client"/>
<service name="cockpit"/>
</zone>
zones/home.xml 0000644 00000000615 15173504176 0007367 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone>
<short>Home</short>
<description>For use in home areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
<service name="ssh"/>
<service name="mdns"/>
<service name="samba-client"/>
<service name="dhcpv6-client"/>
<service name="cockpit"/>
</zone>
zones/external.xml 0000644 00000000460 15173504176 0010257 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone>
<short>External</short>
<description>For use on external networks. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
<service name="ssh"/>
<masquerade/>
</zone>
zones/block.xml 0000644 00000000453 15173504176 0007531 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone target="%%REJECT%%">
<short>Block</short>
<description>Unsolicited incoming network packets are rejected. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.</description>
</zone>
zones/drop.xml 0000644 00000000443 15173504177 0007403 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone target="DROP">
<short>Drop</short>
<description>Unsolicited incoming network packets are dropped. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.</description>
</zone>
zones/nm-shared.xml 0000644 00000001331 15173504177 0010312 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone target="ACCEPT">
<short>NetworkManager Shared</short>
<description>
This zone is used internally by NetworkManager when activating a
profile that uses connection sharing and doesn't have an explicit
firewall zone set.
Block all traffic to the local machine except ICMP, ICMPv6, DHCP
and DNS. Allow all forwarded traffic.
Note that future package updates may change the definition of the
zone unless you overwrite it with your own definition.
</description>
<rule priority='32767'>
<reject/>
</rule>
<protocol value='icmp'/>
<protocol value='ipv6-icmp'/>
<service name="dhcp"/>
<service name="dns"/>
<service name="ssh"/>
</zone>
zones/trusted.xml 0000644 00000000242 15173504177 0010126 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone target="ACCEPT">
<short>Trusted</short>
<description>All network connections are accepted.</description>
</zone>
zones/dmz.xml 0000644 00000000445 15173504177 0007233 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone>
<short>DMZ</short>
<description>For computers in your demilitarized zone that are publicly-accessible with limited access to your internal network. Only selected incoming connections are accepted.</description>
<service name="ssh"/>
</zone>
zones/work.xml 0000644 00000000523 15173504177 0007420 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone>
<short>Work</short>
<description>For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
<service name="ssh"/>
<service name="dhcpv6-client"/>
<service name="cockpit"/>
</zone>
zones/internal.xml 0000644 00000000634 15173504177 0010255 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<zone>
<short>Internal</short>
<description>For use on internal networks. You mostly trust the other computers on the networks to not harm your computer. Only selected incoming connections are accepted.</description>
<service name="ssh"/>
<service name="mdns"/>
<service name="samba-client"/>
<service name="dhcpv6-client"/>
<service name="cockpit"/>
</zone>
ipsets/README 0000644 00000000035 15173504177 0006743 0 ustar 00 Location for built-in ipsets
policies/allow-host-ipv6.xml 0000644 00000001211 15173504177 0012055 0 ustar 00 <?xml version="1.0" encoding="utf-8"?>
<policy target="CONTINUE" priority="-15000">
<short>Allow host IPv6</short>
<description>Allows basic IPv6 functionality for the host running firewalld.</description>
<ingress-zone name="ANY" />
<egress-zone name="HOST" />
<rule family="ipv6">
<icmp-type name="neighbour-advertisement" />
<accept />
</rule>
<rule family="ipv6">
<icmp-type name="neighbour-solicitation" />
<accept />
</rule>
<rule family="ipv6">
<icmp-type name="router-advertisement" />
<accept />
</rule>
<rule family="ipv6">
<icmp-type name="redirect" />
<accept />
</rule>
</policy>
