mirror of
https://gitlab.com/shorewall/code.git
synced 2025-01-03 03:59:16 +01:00
Rename home->lan and correct spelling of Simon's name
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2866 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
6d5e87a121
commit
1f4b25256c
@ -11,7 +11,7 @@
|
|||||||
<author>
|
<author>
|
||||||
<firstname>Simon</firstname>
|
<firstname>Simon</firstname>
|
||||||
|
|
||||||
<surname>Mater</surname>
|
<surname>Matter</surname>
|
||||||
</author>
|
</author>
|
||||||
|
|
||||||
<author>
|
<author>
|
||||||
@ -597,7 +597,7 @@ openvpnserver:1194 Wifi 192.168.3.0/24
|
|||||||
|
|
||||||
<programlisting>#ZONE TYPE OPTIONS IN OUT
|
<programlisting>#ZONE TYPE OPTIONS IN OUT
|
||||||
# OPTIONS OPTIONS
|
# OPTIONS OPTIONS
|
||||||
<emphasis role="bold">home ipv4</emphasis> #Wired LAN at our home
|
<emphasis role="bold">lan ipv4</emphasis> #Wired LAN at our home
|
||||||
net ipv4
|
net ipv4
|
||||||
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
|
||||||
</programlisting>
|
</programlisting>
|
||||||
@ -609,7 +609,7 @@ net ipv4
|
|||||||
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
|
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
|
||||||
#
|
#
|
||||||
net eth0 detect routefilter,dhcp,tcpflags
|
net eth0 detect routefilter,dhcp,tcpflags
|
||||||
<emphasis role="bold">home tap0 192.168.1.255</emphasis>
|
<emphasis role="bold">lan tap0 192.168.1.255</emphasis>
|
||||||
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|
||||||
</programlisting>
|
</programlisting>
|
||||||
</section>
|
</section>
|
||||||
@ -619,17 +619,17 @@ net eth0 detect routefilter,dhcp,tcpflags
|
|||||||
|
|
||||||
<para>Since we don't expect any traffic between the <emphasis
|
<para>Since we don't expect any traffic between the <emphasis
|
||||||
role="bold">net</emphasis> zone and the <emphasis
|
role="bold">net</emphasis> zone and the <emphasis
|
||||||
role="bold">home</emphasis> zone, we use NONE policies for that
|
role="bold">lan</emphasis> zone, we use NONE policies for that
|
||||||
traffic. If any such traffic should occur, it will be handled
|
traffic. If any such traffic should occur, it will be handled
|
||||||
according to the all->all policy.</para>
|
according to the all->all policy.</para>
|
||||||
|
|
||||||
<programlisting>#SOURCE DEST POLICY LOG LIMIT:BURST
|
<programlisting>#SOURCE DEST POLICY LOG LIMIT:BURST
|
||||||
# LEVEL
|
# LEVEL
|
||||||
fw net ACCEPT
|
fw net ACCEPT
|
||||||
<emphasis role="bold">fw home ACCEPT
|
<emphasis role="bold">fw lan ACCEPT
|
||||||
home fw ACCEPT
|
lan fw ACCEPT
|
||||||
net home NONE
|
net lan NONE
|
||||||
home net NONE</emphasis>
|
lan net NONE</emphasis>
|
||||||
net all DROP info
|
net all DROP info
|
||||||
# The FOLLOWING POLICY MUST BE LAST
|
# The FOLLOWING POLICY MUST BE LAST
|
||||||
all all REJECT info
|
all all REJECT info
|
||||||
|
Loading…
Reference in New Issue
Block a user