From 5476538eb1f73a152dd9ea92e90c355e875ec34b Mon Sep 17 00:00:00 2001 From: Jeremy Lecour Date: Wed, 30 Oct 2019 14:37:22 +0100 Subject: [PATCH] minifirewall: no http filtering by default --- CHANGELOG.md | 1 + minifirewall/files/minifirewall.conf | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index acd41ddd..a8526326 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -43,6 +43,7 @@ evolinux-base: on debian 10 and later, add /usr/share/scripts in root's PATH * lxc: rely on lxc_container module instead of command module * lxc: remove useless loop in apt execution * lxc: update our default template to be compatible with Debian 10 +* minifirewall: no http filtering by default * php: By default, allow 128M for OpCache (instead of 64M) * php: Don't set a chroot for the default fpm pool * rbenv: install Ruby 2.6.5 by default diff --git a/minifirewall/files/minifirewall.conf b/minifirewall/files/minifirewall.conf index 85246940..8f535230 100644 --- a/minifirewall/files/minifirewall.conf +++ b/minifirewall/files/minifirewall.conf @@ -50,7 +50,8 @@ DNSSERVEURS='0.0.0.0/0' # HTTP authorizations # (you can use DNS names but set cron to reload minifirewall regularly) # (if you have HTTP proxy, set 0.0.0.0/0) -HTTPSITES='security.debian.org security-cdn.debian.org pub.evolix.net volatile.debian.org mirror.evolix.org backports.debian.org hwraid.le-vert.net antispam00.evolix.org spamassassin.apache.org sa-update.space-pro.be sa-update.secnap.net www.sa-update.pccc.com sa-update.dnswl.org' +# HTTPSITES='security.debian.org security-cdn.debian.org pub.evolix.net volatile.debian.org mirror.evolix.org backports.debian.org hwraid.le-vert.net antispam00.evolix.org spamassassin.apache.org sa-update.space-pro.be sa-update.secnap.net www.sa-update.pccc.com sa-update.dnswl.org' +HTTPSITES='0.0.0.0/0' # HTTPS authorizations HTTPSSITES='0.0.0.0/0'