extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-24 08:33:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

clean up policy file

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1173 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-02-21 21:11:53 +00:00
parent ada5d19774
commit 157dbf6870
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
Shorewall2/policy
View File

@ -6,10 +6,9 @@
# THE ORDER OF ENTRIES IN THIS FILE IS IMPORTANT # THE ORDER OF ENTRIES IN THIS FILE IS IMPORTANT
# #
# This file determines what to do with a new connection request if we # This file determines what to do with a new connection request if we
# don't get a match from the /etc/shorewall/rules file or from the # don't get a match from the /etc/shorewall/rules file . For each
# /etc/shorewall/common[.def] file. For each source/destination pair, the # source/destination pair, the file is processed in order until a
# file is processed in order until a match is found ("all" will match # match is found ("all" will match any client or server).
# any client or server).
# #
# Columns are: # Columns are:
# #
@ -43,6 +42,12 @@
# SOURCE or DEST columns contain the # SOURCE or DEST columns contain the
# firewall zone ($FW) or "all". # firewall zone ($FW) or "all".
# #
# If this column contains ACCEPT, DROP or REJECT and a
# corresponding common action is defined in
# /etc/shorewall/actions (or /usr/share/shorewall/actions.std)
# then that action will be invoked before the policy named in
# this column is inforced.
#
# LOG LEVEL If supplied, each connection handled under the default # LOG LEVEL If supplied, each connection handled under the default
# POLICY is logged at that level. If not supplied, no # POLICY is logged at that level. If not supplied, no
# log message is generated. See syslog.conf(5) for a # log message is generated. See syslog.conf(5) for a
@ -55,7 +60,7 @@
# (http://www.gnumonks.org/projects/ulogd). # (http://www.gnumonks.org/projects/ulogd).
# #
# If you don't want to log but need to specify the # If you don't want to log but need to specify the
# following column, place "_" here. # following column, place "-" here.
# #
# LIMIT:BURST If passed, specifies the maximum TCP connection rate # LIMIT:BURST If passed, specifies the maximum TCP connection rate
# and the size of an acceptable burst. If not specified, # and the size of an acceptable burst. If not specified,