2008-12-09 17:50:17 +01:00
|
|
|
#
|
2015-07-28 19:59:11 +02:00
|
|
|
# Shorewall6 version 5 - Actions.std File
|
2008-12-09 17:50:17 +01:00
|
|
|
#
|
2008-12-09 21:15:57 +01:00
|
|
|
# /usr/share/shorewall6/actions.std
|
2008-12-09 17:50:17 +01:00
|
|
|
#
|
|
|
|
|
# Please see http://shorewall.net/Actions.html for additional
|
|
|
|
|
# information.
|
|
|
|
|
#
|
|
|
|
|
###############################################################################
|
|
|
|
|
#ACTION
|
2012-12-04 19:54:32 +01:00
|
|
|
A_Drop # Audited Default Action for DROP policy
|
|
|
|
|
A_Reject # Audited Default Action for REJECT policy
|
|
|
|
|
A_AllowICMPs # Audited Accept needed ICMP6 types
|
|
|
|
|
AllowICMPs # Accept needed ICMP6 types
|
2017-03-05 21:09:33 +01:00
|
|
|
allowBcast inline # Silently Allow Broadcast
|
2013-02-07 20:21:13 +01:00
|
|
|
allowInvalid inline # Accepts packets in the INVALID conntrack state
|
2017-03-05 21:09:33 +01:00
|
|
|
allowMcast inline # Silently Allow Multicast
|
2013-07-17 19:19:18 +02:00
|
|
|
AutoBL noinline # Auto-blacklist IPs that exceed thesholds
|
|
|
|
|
AutoBLL noinline # Helper for AutoBL
|
2017-05-26 16:39:09 +02:00
|
|
|
BLACKLIST logjump,section # Add sender to the dynamic blacklist
|
2017-02-15 19:16:20 +01:00
|
|
|
Broadcast noinline # Handles Broadcast/Anycast
|
2017-02-12 18:28:38 +01:00
|
|
|
Drop # Default Action for DROP policy (deprecated)
|
2017-03-05 21:09:33 +01:00
|
|
|
dropBcast inline # Silently Drop Broadcast
|
2013-02-07 20:21:13 +01:00
|
|
|
dropInvalid inline # Drops packets in the INVALID conntrack state
|
2017-03-05 21:09:33 +01:00
|
|
|
dropMcast inline # Silently Drop Multicast
|
|
|
|
|
dropNotSyn noinline # Silently Drop Non-syn TCP packets
|
2017-02-11 22:41:28 +01:00
|
|
|
DropDNSrep inline # Drops DNS replies
|
2014-10-10 18:42:23 +02:00
|
|
|
DropSmurfs noinline # Handles packets with a broadcast source address
|
2016-03-14 22:54:09 +01:00
|
|
|
Established inline,\ # Handles packets in the ESTABLISHED state
|
|
|
|
|
state=ESTABLISHED
|
2017-05-31 17:28:27 +02:00
|
|
|
FIN inline,audit # Handles ACK,FIN,PSH packets
|
2017-03-24 17:54:36 +01:00
|
|
|
forwardUPnP noinline # Allow traffic that upnpd has redirected from 'upnp' interfaces.
|
2013-07-12 18:45:41 +02:00
|
|
|
IfEvent noinline # Perform an action based on an event
|
2016-03-14 22:54:09 +01:00
|
|
|
Invalid inline,audit,\ # Handles packets in the INVALID conntrack state
|
|
|
|
|
state=INVALID
|
2017-02-15 19:16:20 +01:00
|
|
|
Multicast noinline # Handles Multicast
|
2016-03-14 22:54:09 +01:00
|
|
|
New inline,state=NEW # Handles packets in the NEW conntrack state
|
2013-02-07 20:21:13 +01:00
|
|
|
NotSyn inline # Handles TCP packets that do not have SYN=1 and ACK=0
|
2017-02-12 18:28:38 +01:00
|
|
|
Reject # Default Action for REJECT policy (deprecated)
|
2017-03-05 21:09:33 +01:00
|
|
|
rejNotSyn noinline # Silently Reject Non-syn TCP packets
|
2016-03-14 22:54:09 +01:00
|
|
|
Related inline,\ # Handles packets in the RELATED conntrack state
|
|
|
|
|
state=RELATED
|
2013-07-12 18:45:41 +02:00
|
|
|
ResetEvent inline # Reset an Event
|
2013-02-07 20:21:13 +01:00
|
|
|
RST inline # Handle packets with RST set
|
2013-07-12 18:45:41 +02:00
|
|
|
SetEvent inline # Initialize an event
|
2013-02-02 00:55:39 +01:00
|
|
|
TCPFlags # Handles bad flags combinations
|
2016-03-14 22:54:09 +01:00
|
|
|
Untracked inline,\ # Handles packets in the UNTRACKED conntrack state
|
|
|
|
|
state=UNTRACKED
|
