# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-ip6tables-block-src-22,v 1.3 2010/10/21 05:32:49 pb22 Exp $
# patch to not allow *src* port 22. *assume* this was a mistake. ???
# patch-file hasno : ^-A.RH-Firewall-1-INPUT.-m.tcp.-p.tcp.--sport.22.-j.ACCEPT
# patch-file distmatches = Fedora|CentOS|Red.Hat.Enterprise.Linux
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/ip6tables	2008-03-06 06:12:45.000000000 +0000
+++ /etc/sysconfig/ip6tables	2008-03-06 06:16:46.000000000 +0000
@@ -22 +22,2 @@
--A RH-Firewall-1-INPUT -m tcp -p tcp --sport 22 -j ACCEPT
+#1 cl.cam.ac.uk: we do not understand why the default allows *src* port 22
+#A RH-Firewall-1-INPUT -m tcp -p tcp --sport 22 -j ACCEPT
