From 00cedeeda3c4f560a6297e1b533ccdd331506231 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Wed, 24 Nov 2010 11:23:37 -0800 Subject: [PATCH] Update macro template for HEADERS column --- Shorewall/Macros/macro.template | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/Shorewall/Macros/macro.template b/Shorewall/Macros/macro.template index 616afa18f..1f7740fdc 100644 --- a/Shorewall/Macros/macro.template +++ b/Shorewall/Macros/macro.template @@ -398,6 +398,27 @@ # # Defines the ending date and time. # +# HEADERS [any:|exactly:]
+# +# where
is a comma-separated list of headers from the following: +# +# +# Long Name Short Name Number +# -------------------------------------- +# auth ah 50 +# esp esp 51 +# hop-by-hop hop 0 +# route ipv6-route 41 +# frag ipv6-frag 44 +# none ipv6-nonxt 59 +# protocol proto 255 +# +# If 'any:' is specified, the rule will match if any of the listed +# headers are present. If 'exactly:' is specified, the will match +# packets that exactly include all specified headers. If neither is +# given, 'any:' is assumed. +# +# # A few examples should help show how Macros work. # # /etc/shorewall/macro.FwdFTP: