extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-08 16:54:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix comments in Drop and Reject Macros

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4570 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-09-12 19:43:37 +00:00
parent c718894e4c
commit 146e88b747
2 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Shorewall/macro.Drop
View File

@ -4,8 +4,7 @@
# /usr/share/shorewall/macro.Drop # /usr/share/shorewall/macro.Drop
# #
# This macro generates the same rules as the Drop default action # This macro generates the same rules as the Drop default action
# You can use it at the end of the rules file to simulate a Drop # It is used in place of action.Drop when USE_ACTIONS=No.
# default action when USE_ACTIONS=No.
# #
# Example: # Example:
# #
@ -29,13 +28,13 @@ dropBcast
ACCEPT - - icmp fragmentation-needed ACCEPT - - icmp fragmentation-needed
ACCEPT - - icmp time-exceeded ACCEPT - - icmp time-exceeded
# #
# Drop packets that in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be # and just confuse people when they appear in the log (these ICMPs cannot be
# rejected). # rejected).
# #
dropInvalid dropInvalid
# #
# Drop Microsoft noise so that it doesn't clutter up the lot. # Drop Microsoft noise so that it doesn't clutter up the log.
# #
DROP - - udp 135,445 DROP - - udp 135,445
DROP - - udp 137:139 DROP - - udp 137:139

7
Shorewall/macro.Reject
View File

@ -4,8 +4,7 @@
# /usr/share/shorewall/macro.Reject # /usr/share/shorewall/macro.Reject
# #
# This macro generates the same rules as the Reject default action # This macro generates the same rules as the Reject default action
# You can use it at the end of the rules file to simulate a Reject # It is used in place of action.Reject when USE_ACTIONS=No.
# default action when USE_ACTIONS=No.
# #
# Example: # Example:
# #
@ -30,13 +29,13 @@ dropBcast
ACCEPT - - icmp fragmentation-needed ACCEPT - - icmp fragmentation-needed
ACCEPT - - icmp time-exceeded ACCEPT - - icmp time-exceeded
# #
# Drop packets that in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be # and just confuse people when they appear in the log (these ICMPs cannot be
# rejected). # rejected).
# #
dropInvalid dropInvalid
# #
# Reject Microsoft noise so that it doesn't clutter up the lot. # Reject Microsoft noise so that it doesn't clutter up the log.
# #
REJECT - - udp 135,445 REJECT - - udp 135,445
REJECT - - udp 137:139 REJECT - - udp 137:139