2008-12-09 17:50:17 +01:00
|
|
|
#
|
2008-12-09 21:15:57 +01:00
|
|
|
# Shorewall6 version 4 - Actions.std File
|
2008-12-09 17:50:17 +01:00
|
|
|
#
|
2008-12-09 21:15:57 +01:00
|
|
|
# /usr/share/shorewall6/actions.std
|
2008-12-09 17:50:17 +01:00
|
|
|
#
|
|
|
|
|
# Please see http://shorewall.net/Actions.html for additional
|
|
|
|
|
# information.
|
|
|
|
|
#
|
|
|
|
|
# Builtin Actions are:
|
|
|
|
|
#
|
2012-04-24 23:52:57 +02:00
|
|
|
# allowBcasts # Accept multicast and anycast packets
|
2008-12-13 19:22:42 +01:00
|
|
|
# dropBcasts # Silently Drop multicast and anycast packets
|
2008-12-09 17:50:17 +01:00
|
|
|
# dropNotSyn # Silently Drop Non-syn TCP packets
|
|
|
|
|
# rejNotSyn # Silently Reject Non-syn TCP packets
|
|
|
|
|
# dropInvalid # Silently Drop packets that are in the INVALID
|
|
|
|
|
# # conntrack state.
|
|
|
|
|
# allowInvalid # Accept packets that are in the INVALID
|
|
|
|
|
# # conntrack state.
|
|
|
|
|
#
|
|
|
|
|
###############################################################################
|
|
|
|
|
#ACTION
|
2011-05-24 20:31:42 +02:00
|
|
|
A_Drop # Audited Default Action for DROP policy
|
|
|
|
|
A_Reject # Audited Default Action for REJECT policy
|
|
|
|
|
A_AllowICMPs # Audited Accept needed ICMP6 types
|
2008-12-13 22:19:27 +01:00
|
|
|
AllowICMPs # Accept needed ICMP6 types
|
2011-07-04 16:51:22 +02:00
|
|
|
Broadcast # Handles Broadcast/Multicast/Anycast
|
2008-12-09 17:50:17 +01:00
|
|
|
Drop # Default Action for DROP policy
|
2011-11-03 19:03:17 +01:00
|
|
|
DropSmurfs # Handles packets with a broadcast source address
|
2012-05-15 20:14:28 +02:00
|
|
|
GeoIP # Match packets by ISO 3166 Country Code
|
2011-07-04 16:51:22 +02:00
|
|
|
Invalid # Handles packets in the INVALID conntrack state
|
|
|
|
|
NotSyn # Handles TCP packets that do not have SYN=1 and ACK=0
|
2008-12-09 17:50:17 +01:00
|
|
|
Reject # Default Action for REJECT policy
|
2011-11-03 19:03:17 +01:00
|
|
|
TCPFlags # Handles bad flags combinations
|
|
|
|
|
|
