屑俺日記

☆ ufw簡略に。

$ sudo ufw allow from IP_ADDR to any  port PORT1,PORT2,.. proto tcp|udp

$ sudo ufw status numbered 
Status: active
 
     To                         Action      From
     --                         ------      ----
[ 1] 60000:60004/udp            ALLOW IN    IPv4_ADDR              
[ 2] 22,587,993/tcp             ALLOW IN    IPv4_ADDR              
[ 3] 25,80,443/tcp              ALLOW IN    Anywhere                  
[ 4] 60000:60004/udp            ALLOW IN    $IPv6_ADDR1        
[ 5] 25,80,443/tcp (v6)         ALLOW IN    Anywhere (v6)             
[ 6] 22,587,993/tcp             ALLOW IN    $IPv6_ADDR2
[ 7] 22,587,993/tcp             ALLOW IN    $IPv6_ADDR1        
[ 8] 60000:60004/udp            ALLOW IN    $IPv6_ADDR2

Submission Portなんてごく一部に開放すれば足りるだろう。

☆ 接続テスト

$ openssl s_client -servername $SERVER -connect $SERVER:$SERVICE

$SERVICEは/etc/servicesにあるとおり。
imapsとかpop3sとかhttpsとか。