# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-ip6tables-disable-CUPS,v 1.4 2010/10/21 05:32:49 pb22 Exp $
# patch to disable CUPS. Has to be manually undone on CUPS servers?
# patch-file hasno : ^-A.RH-Firewall-1-INPUT.-p.udp.-m.udp.--dport.631.-j.ACCEPT
# patch-file distmatches = Fedora|CentOS|Red.Hat.Enterprise.Linux
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/ip6tables	2008-03-06 06:03:08.000000000 +0000
+++ /etc/sysconfig/ip6tables	2008-03-06 06:06:37.000000000 +0000
@@ -16,3 +16,4 @@
 #A RH-Firewall-1-INPUT -p udp --dport 5353 -d ff02::fb -j ACCEPT
--A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
--A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
+#2 cl.cam.ac.uk: disable CUPS by default as most machines aren't servers
+#A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
+#A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
