Merge branch 'master' of ssh://git.code.sf.net/p/shorewall/code

This commit is contained in:
Tom Eastep 2015-11-09 07:24:52 -08:00
commit 27c1cd3d6e
73 changed files with 208 additions and 92 deletions

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Accounting File # Shorewall - Accounting File
# #
# /etc/shorewall/accounting
#
# For information about entries in this file, type "man shorewall-accounting" # For information about entries in this file, type "man shorewall-accounting"
# #
# Please see http://shorewall.net/Accounting.html for examples and # Please see http://shorewall.net/Accounting.html for examples and

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Arprules File # Shorewall - Arprules File
# #
# /etc/shorewall/arprules
#
# For information about entries in this file, type "man shorewall-arprules" # For information about entries in this file, type "man shorewall-arprules"
# #
############################################################################################################## ##############################################################################################################

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Blrules File # Shorewall - Blrules File
# #
# /etc/shorewall/blrules
#
# For information about entries in this file, type "man shorewall-blrules" # For information about entries in this file, type "man shorewall-blrules"
# #
# Please see http://shorewall.net/blacklisting_support.htm for additional # Please see http://shorewall.net/blacklisting_support.htm for additional

View File

@ -1,10 +1,13 @@
# #
# Shorewall - Conntrack File # Shorewall - Conntrack File
# #
# /etc/shorewall/conntrack
#
# For information about entries in this file, type "man shorewall-conntrack" # For information about entries in this file, type "man shorewall-conntrack"
# #
############################################################################################################## ##############################################################################################################
?FORMAT 3 ?FORMAT 3
##############################################################################################################
#ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH #ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH
# PORT(S) PORT(S) GROUP # PORT(S) PORT(S) GROUP
?if $AUTOHELPERS && __CT_TARGET ?if $AUTOHELPERS && __CT_TARGET

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Ecn File # Shorewall - Ecn File
# #
# /etc/shorewall/ecn
#
# For information about entries in this file, type "man shorewall-ecn" # For information about entries in this file, type "man shorewall-ecn"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Hosts file # Shorewall - Hosts file
# #
# /etc/shorewall/hosts
#
# For information about entries in this file, type "man shorewall-hosts" # For information about entries in this file, type "man shorewall-hosts"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall/init # /etc/shorewall/init
# #
# Add commands below that you want to be executed at the beginning of # Add commands below that you want to be executed at the beginning of
# a "shorewall start", "shorewall-reload" or "shorewall restart" command. # a "shorewall start", "shorewall-reload" or "shorewall restart" command.
# #
# For additional information, see # For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm # http://shorewall.net/shorewall_extension_scripts.htm

View File

@ -3,10 +3,10 @@
# #
# /etc/shorewall/initdone # /etc/shorewall/initdone
# #
# Add commands below that you want to be executed during # Add commands below that you want to be executed during
# "shorewall start", "shorewall reload" or "shorewall restart" commands # "shorewall start", "shorewall reload" or "shorewall restart" commands
# at the point where Shorewall has not yet added any permanent rules to # at the point where Shorewall has not yet added any permanent rules to
# the builtin chains. # the builtin chains.
# #
# For additional information, see # For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm # http://shorewall.net/shorewall_extension_scripts.htm

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Interfaces File # Shorewall - Interfaces File
# #
# /etc/shorewall/interfaces
#
# For information about entries in this file, type "man shorewall-interfaces" # For information about entries in this file, type "man shorewall-interfaces"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -3,13 +3,13 @@
# #
# /etc/shorewall/isusable # /etc/shorewall/isusable
# #
# This script is called when Shorewall is attempting to determine # This script is called when Shorewall is attempting to determine
# if an interface named in /etc/shorewall/providers is usable. # if an interface named in /etc/shorewall/providers is usable.
# #
# The script is invoked inside a function that accepts an interface # The script is invoked inside a function that accepts an interface
# name as a single argument. The file below is designed to work with # name as a single argument. The file below is designed to work with
# both swping and lsm as described at # both swping and lsm as described at
# http://www.shorewall.net/MultiISP.html # http://www.shorewall.net/MultiISP.html
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Maclist file # Shorewall - Maclist file
# #
# /etc/shorewall/maclist
#
# For information about entries in this file, type "man shorewall-maclist" # For information about entries in this file, type "man shorewall-maclist"
# #
# For additional information, see http://shorewall.net/MAC_Validation.html # For additional information, see http://shorewall.net/MAC_Validation.html

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Mangle File # Shorewall - Mangle File
# #
# /etc/shorewall/mangle
#
# For information about entries in this file, type "man shorewall-mangle" # For information about entries in this file, type "man shorewall-mangle"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.
@ -9,6 +11,7 @@
# #
# See http://shorewall.net/PacketMarking.html for a detailed description of # See http://shorewall.net/PacketMarking.html for a detailed description of
# the Netfilter/Shorewall packet marking mechanism. # the Netfilter/Shorewall packet marking mechanism.
#
#################################################################################################################################################### ####################################################################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES HELPER PROBABILITY DSCP #ACTION SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES HELPER PROBABILITY DSCP
# PORT(S) PORT(S) # PORT(S) PORT(S)

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Masq file # Shorewall - Masq file
# #
# /etc/shorewall/masq
#
# For information about entries in this file, type "man shorewall-masq" # For information about entries in this file, type "man shorewall-masq"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Nat File # Shorewall - Nat File
# #
# /etc/shorewall/nat
#
# For information about entries in this file, type "man shorewall-nat" # For information about entries in this file, type "man shorewall-nat"
# #
# For additional information, see http://shorewall.net/NAT.htm # For additional information, see http://shorewall.net/NAT.htm

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Netmap File # Shorewall - Netmap File
# #
# /etc/shorewall/netmap
#
# For information about entries in this file, type "man shorewall-netmap" # For information about entries in this file, type "man shorewall-netmap"
# #
# See http://shorewall.net/netmap.html for an example and usage # See http://shorewall.net/netmap.html for an example and usage

View File

@ -3,25 +3,25 @@
# #
# /etc/shorewall/params # /etc/shorewall/params
# #
# Assign any variables that you need here. # Assign any variables that you need here.
# #
# It is suggested that variable names begin with an upper case letter # It is suggested that variable names begin with an upper case letter
# to distinguish them from variables used internally within the # to distinguish them from variables used internally within the
# Shorewall programs # Shorewall programs
# #
# Example: # Example:
# #
# NET_IF=eth0 # NET_IF=eth0
# NET_BCAST=130.252.100.255 # NET_BCAST=130.252.100.255
# NET_OPTIONS=routefilter,norfc1918 # NET_OPTIONS=routefilter,norfc1918
# #
# Example (/etc/shorewall/interfaces record): # Example (/etc/shorewall/interfaces record):
# #
# net $NET_IF $NET_BCAST $NET_OPTIONS # net $NET_IF $NET_BCAST $NET_OPTIONS
# #
# The result will be the same as if the record had been written # The result will be the same as if the record had been written
# #
# net eth0 130.252.100.255 routefilter,norfc1918 # net eth0 130.252.100.255 routefilter,norfc1918
# #
############################################################################### ###############################################################################

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Policy File # Shorewall - Policy File
# #
# /etc/shorewall/policy
#
# For information about entries in this file, type "man shorewall-policy" # For information about entries in this file, type "man shorewall-policy"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Providers File # Shorewall - Providers File
# #
# /etc/shorewall/providers
#
# For information about entries in this file, type "man shorewall-providers" # For information about entries in this file, type "man shorewall-providers"
# #
# For additional information, see http://shorewall.net/MultiISP.html # For additional information, see http://shorewall.net/MultiISP.html

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Proxyarp File # Shorewall - Proxyarp File
# #
# /etc/shorewall/proxyarp
#
# For information about entries in this file, type "man shorewall-proxyarp" # For information about entries in this file, type "man shorewall-proxyarp"
# #
# See http://shorewall.net/ProxyARP.htm for additional information. # See http://shorewall.net/ProxyARP.htm for additional information.

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall/restored # /etc/shorewall/restored
# #
# Add commands below that you want to be executed after shorewall has # Add commands below that you want to be executed after shorewall has
# completed a 'restore' command. # completed a 'restore' command.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -1,8 +1,11 @@
# #
# Shorewall - Routes File # Shorewall - Routes File
# #
# /etc/shorewall/routes
#
# For information about entries in this file, type "man shorewall-routes" # For information about entries in this file, type "man shorewall-routes"
# #
# For additional information, see http://www.shorewall.net/MultiISP.html # For additional information, see http://www.shorewall.net/MultiISP.html
#
############################################################################### ###############################################################################
#PROVIDER DEST GATEWAY DEVICE OPTIONS #PROVIDER DEST GATEWAY DEVICE OPTIONS

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Routestopped File # Shorewall - Routestopped File
# #
# /etc/shorewall/routestopped
#
# This file is deprecated in favor of the stoppedrules file # This file is deprecated in favor of the stoppedrules file
# #
# For information about entries in this file, type "man shorewall-routestopped" # For information about entries in this file, type "man shorewall-routestopped"

View File

@ -1,8 +1,11 @@
# #
# Shorewall - Rtrules File # Shorewall - Rtrules File
# #
# /etc/shorewall/rtrules
#
# For information about entries in this file, type "man shorewall-rtrules" # For information about entries in this file, type "man shorewall-rtrules"
# #
# For additional information, see http://www.shorewall.net/MultiISP.html # For additional information, see http://www.shorewall.net/MultiISP.html
#
#################################################################################### ####################################################################################
#SOURCE DEST PROVIDER PRIORITY MASK #SOURCE DEST PROVIDER PRIORITY MASK

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Rules File # Shorewall - Rules File
# #
# /etc/shorewall/rules
#
# For information on the settings in this file, type "man shorewall-rules" # For information on the settings in this file, type "man shorewall-rules"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Secmarks File # Shorewall - Secmarks File
# #
# /etc/shorewall/secmarks
#
# For information about entries in this file, type "man shorewall-secmarks" # For information about entries in this file, type "man shorewall-secmarks"
# #
############################################################################################################ ############################################################################################################

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall/start # /etc/shorewall/start
# #
# Add commands below that you want to be executed after shorewall has # Add commands below that you want to be executed after shorewall has
# been started, reloaded or restarted. # been started, reloaded or restarted.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -3,15 +3,15 @@
# #
# /etc/shorewall/started # /etc/shorewall/started
# #
# Add commands below that you want to be executed after shorewall has # Add commands below that you want to be executed after shorewall has
# been completely started, reloaded or restarted. The difference between # been completely started, reloaded or restarted. The difference between
# this extension script and /etc/shorewall/start is that this one is # this extension script and /etc/shorewall/start is that this one is
# invoked after the 'shorewall' chain has been created (thus # invoked after the 'shorewall' chain has been created (thus
# signaling that the firewall is completely up). # signaling that the firewall is completely up).
# #
# This script should not change the firewall configuration directly but # This script should not change the firewall configuration directly but
# may do so indirectly by running /sbin/shorewall with the 'nolock' # may do so indirectly by running /sbin/shorewall with the 'nolock'
# option. # option.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall/stop # /etc/shorewall/stop
# #
# Add commands below that you want to be executed at the beginning of a # Add commands below that you want to be executed at the beginning of a
# "shorewall stop" command. # "shorewall stop" command.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall/stopped # /etc/shorewall/stopped
# #
# Add commands below that you want to be executed at the completion of a # Add commands below that you want to be executed at the completion of a
# "shorewall stop" command. # "shorewall stop" command.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Stoppedrules File # Shorewall - Stoppedrules File
# #
# /etc/shorewall/stoppedrules
#
# For information about entries in this file, type "man shorewall-stoppedrules" # For information about entries in this file, type "man shorewall-stoppedrules"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Tcclasses File # Shorewall - Tcclasses File
# #
# /etc/shorewall/tcclasses
#
# For information about entries in this file, type "man shorewall-tcclasses" # For information about entries in this file, type "man shorewall-tcclasses"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Tcdevices File # Shorewall - Tcdevices File
# #
# /etc/shorewall/tcdevices
#
# For information about entries in this file, type "man shorewall-tcdevices" # For information about entries in this file, type "man shorewall-tcdevices"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Tcfilters File # Shorewall - Tcfilters File
# #
# /etc/shorewall/tcfilters
#
# For information about entries in this file, type "man shorewall-tcfilters" # For information about entries in this file, type "man shorewall-tcfilters"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Tcinterfaces File # Shorewall - Tcinterfaces File
# #
# /etc/shorewall/tcinterfaces
#
# For information about entries in this file, type "man shorewall-tcinterfaces" # For information about entries in this file, type "man shorewall-tcinterfaces"
# #
# See http://shorewall.net/simple_traffic_shaping.htm for additional # See http://shorewall.net/simple_traffic_shaping.htm for additional

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Tcpri File # Shorewall - Tcpri File
# #
# /etc/shorewall/tcpri
#
# For information about entries in this file, type "man shorewall-tcpri" # For information about entries in this file, type "man shorewall-tcpri"
# #
# See http://shorewall.net/simple_traffic_shaping.htm for additional # See http://shorewall.net/simple_traffic_shaping.htm for additional

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Tunnels File # Shorewall - Tunnels File
# #
# /etc/shorewall/tunnels
#
# For information about entries in this file, type "man shorewall-tunnels" # For information about entries in this file, type "man shorewall-tunnels"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall - Zones File # Shorewall - Zones File
# #
# /etc/shorewall/zones
#
# For information about this file, type "man shorewall-zones" # For information about this file, type "man shorewall-zones"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Accounting File # Shorewall6 - Accounting File
# #
# /etc/shorewall6/accounting
#
# For information about entries in this file, type "man shorewall6-accounting" # For information about entries in this file, type "man shorewall6-accounting"
# #
# Please see http://shorewall.net/Accounting.html for examples and # Please see http://shorewall.net/Accounting.html for examples and

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Blrules File # Shorewall6 - Blrules File
# #
# /etc/shorewall6/blrules
#
# For information about entries in this file, type "man shorewall6-blrules" # For information about entries in this file, type "man shorewall6-blrules"
# #
# Please see http://shorewall.net/blacklisting_support.htm for additional # Please see http://shorewall.net/blacklisting_support.htm for additional

View File

@ -1,53 +1,56 @@
# #
# Shorewall6 - Conntrack File # Shorewall6 - Conntrack File
# #
# /etc/shorewall6/conntrack
#
# For information about entries in this file, type "man shorewall6-conntrack" # For information about entries in this file, type "man shorewall6-conntrack"
# #
############################################################################################################## ##############################################################################################################
?FORMAT 2 ?FORMAT 3
##############################################################################################################
#ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH #ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH
# PORT(S) PORT(S) GROUP # PORT(S) PORT(S) GROUP
?if __CT_TARGET ?if $AUTOHELPERS && __CT_TARGET
?if __AMANDA_HELPER ?if __AMANDA_HELPER
CT:helper:amanda all - udp 10080 CT:helper:amanda:PO - - udp 10080
?endif ?endif
?if __FTP_HELPER ?if __FTP_HELPER
CT:helper:ftp all - tcp 21 CT:helper:ftp:PO - - tcp 21
?endif ?endif
?if __H323_HELPER ?if __H323_HELPER
CT:helper:RAS all - udp 1719 CT:helper:RAS:PO - - udp 1719
CT:helper:Q.931 all - tcp 1720 CT:helper:Q.931:PO - - tcp 1720
?endif ?endif
?if __IRC_HELPER ?if __IRC_HELPER
CT:helper:irc all - tcp 6667 CT:helper:irc:PO - - tcp 6667
?endif ?endif
?if __NETBIOS_NS_HELPER ?if __NETBIOS_NS_HELPER
CT:helper:netbios-ns all - udp 137 CT:helper:netbios-ns:PO - - udp 137
?endif ?endif
?if __PPTP_HELPER ?if __PPTP_HELPER
CT:helper:pptp all - tcp 1723 CT:helper:pptp:PO - - tcp 1723
?endif ?endif
?if __SANE_HELPER ?if __SANE_HELPER
CT:helper:sane all - tcp 6566 CT:helper:sane:PO - - tcp 6566
?endif ?endif
?if __SIP_HELPER ?if __SIP_HELPER
CT:helper:sip all - udp 5060 CT:helper:sip:PO - - udp 5060
?endif ?endif
?if __SNMP_HELPER ?if __SNMP_HELPER
CT:helper:snmp all - udp 161 CT:helper:snmp:PO - - udp 161
?endif ?endif
?if __TFTP_HELPER ?if __TFTP_HELPER
CT:helper:tftp all - udp 69 CT:helper:tftp:PO - - udp 69
?endif ?endif
?endif ?endif

View File

@ -1,5 +1,5 @@
# #
# Shorewall - Findgw File # Shorewall6 - Findgw File
# #
# /etc/shorewall6/findgw # /etc/shorewall6/findgw
# #

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Hosts file # Shorewall6 - Hosts file
# #
# /etc/shorewall6/hosts
#
# For information about entries in this file, type "man shorewall6-hosts" # For information about entries in this file, type "man shorewall6-hosts"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall6/init # /etc/shorewall6/init
# #
# Add commands below that you want to be executed at the beginning of # Add commands below that you want to be executed at the beginning of
# a "shorewall6 start" or "shorewall6 restart" command. # a "shorewall6 start" or "shorewall6 restart" command.
# #
# For additional information, see # For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm # http://shorewall.net/shorewall_extension_scripts.htm

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Interfaces File # Shorewall6 - Interfaces File
# #
# /etc/shorewall6/interfaces
#
# For information about entries in this file, type "man shorewall6-interfaces" # For information about entries in this file, type "man shorewall6-interfaces"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -3,13 +3,13 @@
# #
# /etc/shorewall6/isusable # /etc/shorewall6/isusable
# #
# This script is called when Shorewall6 is attempting to determine # This script is called when Shorewall6 is attempting to determine
# if an interface named in /etc/shorewall6/providers is usable. # if an interface named in /etc/shorewall6/providers is usable.
# #
# The script is invoked inside a function that accepts an interface # The script is invoked inside a function that accepts an interface
# name as a single argument. The file below is designed to work with # name as a single argument. The file below is designed to work with
# both swping and lsm as described at # both swping and lsm as described at
# http://www.shorewall.net/MultiISP.html # http://www.shorewall.net/MultiISP.html
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Maclist file # Shorewall6 - Maclist file
# #
# /etc/shorewall6/maclist
#
# For information about entries in this file, type "man shorewall6-maclist" # For information about entries in this file, type "man shorewall6-maclist"
# #
# For additional information, see http://shorewall.net/MAC_Validation.html # For additional information, see http://shorewall.net/MAC_Validation.html

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Mangle File # Shorewall6 - Mangle File
# #
# /etc/shorewall6/mangle
#
# For information about entries in this file, type "man shorewall6-mangle" # For information about entries in this file, type "man shorewall6-mangle"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.
@ -9,6 +11,7 @@
# #
# See http://shorewall.net/PacketMarking.html for a detailed description of # See http://shorewall.net/PacketMarking.html for a detailed description of
# the Netfilter/Shorewall packet marking mechanism. # the Netfilter/Shorewall packet marking mechanism.
#
############################################################################################################################################################ ############################################################################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES HELPER HEADERS PROBABILITY DSCP #ACTION SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES HELPER HEADERS PROBABILITY DSCP
# PORT(S) PORT(S) # PORT(S) PORT(S)

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Masq file # Shorewall6 - Masq file
# #
# /etc/shorewall6/masq
#
# For information about entries in this file, type "man shorewall6-masq" # For information about entries in this file, type "man shorewall6-masq"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Nat File # Shorewall6 - Nat File
# #
# /etc/shorewall6/nat
#
# For information about entries in this file, type "man shorewall6-nat" # For information about entries in this file, type "man shorewall6-nat"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Netmap File # Shorewall6 - Netmap File
# #
# /etc/shorewall6/netmap
#
# For information about entries in this file, type "man shorewall-netmap" # For information about entries in this file, type "man shorewall-netmap"
# #
# See http://shorewall.net/netmap.html for an example and usage # See http://shorewall.net/netmap.html for an example and usage

View File

@ -3,24 +3,24 @@
# #
# /etc/shorewall6/params # /etc/shorewall6/params
# #
# Assign any variables that you need here. # Assign any variables that you need here.
# #
# It is suggested that variable names begin with an upper case letter # It is suggested that variable names begin with an upper case letter
# to distinguish them from variables used internally within the # to distinguish them from variables used internally within the
# Shorewall6 programs # Shorewall6 programs
# #
# Example: # Example:
# #
# NET_IF=eth0 # NET_IF=eth0
# NET_OPTIONS=dhcp,nosmurfs # NET_OPTIONS=dhcp,nosmurfs
# #
# Example (/etc/shorewall6/interfaces record): # Example (/etc/shorewall6/interfaces record):
# #
# net $NET_IF - $NET_OPTIONS # net $NET_IF - $NET_OPTIONS
# #
# The result will be the same as if the record had been written # The result will be the same as if the record had been written
# #
# net eth0 - dhcp,nosmurfs # net eth0 - dhcp,nosmurfs
# #
############################################################################### ###############################################################################

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Policy File # Shorewall6 - Policy File
# #
# /etc/shorewall6/policy
#
# For information about entries in this file, type "man shorewall6-policy" # For information about entries in this file, type "man shorewall6-policy"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Providers File # Shorewall6 - Providers File
# #
# /etc/shorewall6/providers
#
# For information about entries in this file, type "man shorewall6-providers" # For information about entries in this file, type "man shorewall6-providers"
# #
# For additional information, see http://shorewall.net/MultiISP.html # For additional information, see http://shorewall.net/MultiISP.html

View File

@ -1,5 +1,7 @@
# #
# Shorewall - Proxyndp File # Shorewall6 - Proxyndp File
#
# /etc/shorewall6/proxyndp
# #
# For information about entries in this file, type "man shorewall6-proxyndp" # For information about entries in this file, type "man shorewall6-proxyndp"
# #

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall6/restored # /etc/shorewall6/restored
# #
# Add commands below that you want to be executed after shorewall6 has # Add commands below that you want to be executed after shorewall6 has
# completed a 'restore' command. # completed a 'restore' command.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -1,8 +1,11 @@
# #
# Shorewall6 - Routes File # Shorewall6 - Routes File
# #
# /etc/shorewall6/routes
#
# For information about entries in this file, type "man shorewall6-routes" # For information about entries in this file, type "man shorewall6-routes"
# #
# For additional information, see http://www.shorewall.net/MultiISP.html # For additional information, see http://www.shorewall.net/MultiISP.html
#
############################################################################### ###############################################################################
#PROVIDER DEST GATEWAY DEVICE OPTIONS #PROVIDER DEST GATEWAY DEVICE OPTIONS

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Routestopped File # Shorewall6 - Routestopped File
# #
# /etc/shorewall6/routestopped
#
# This file is deprecated in favor of the stoppedrules file. # This file is deprecated in favor of the stoppedrules file.
# #
# For information about entries in this file, type "man shorewall6-routestopped" # For information about entries in this file, type "man shorewall6-routestopped"

View File

@ -1,8 +1,11 @@
# #
# Shorewall6 - Rtrules File # Shorewall6 - Rtrules File
# #
# /etc/shorewall6/rtrules
#
# For information about entries in this file, type "man shorewall6-rtrules" # For information about entries in this file, type "man shorewall6-rtrules"
# #
# For additional information, see http://www.shorewall.net/MultiISP.html # For additional information, see http://www.shorewall.net/MultiISP.html
#
#################################################################################### ####################################################################################
#SOURCE DEST PROVIDER PRIORITY MASK #SOURCE DEST PROVIDER PRIORITY MASK

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Rules File # Shorewall6 - Rules File
# #
# /etc/shorewall6/rules
#
# For information on the settings in this file, type "man shorewall6-rules" # For information on the settings in this file, type "man shorewall6-rules"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,7 +1,7 @@
# #
# Shorewall - Scfilter File # Shorewall6 - Scfilter File
# #
# /etc/shorewall/scfilter # /etc/shorewall6/scfilter
# #
# Replace the 'cat' command below to filter the output of # Replace the 'cat' command below to filter the output of
# 'show connections'. # 'show connections'.

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Secmarks File # Shorewall6 - Secmarks File
# #
# /etc/shorewall6/secmarks
#
# For information about entries in this file, type "man shorewall-secmarks" # For information about entries in this file, type "man shorewall-secmarks"
# #
############################################################################################################ ############################################################################################################

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall6/start # /etc/shorewall6/start
# #
# Add commands below that you want to be executed after shorewall6 has # Add commands below that you want to be executed after shorewall6 has
# been started or restarted. # been started or restarted.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -3,15 +3,15 @@
# #
# /etc/shorewall6/started # /etc/shorewall6/started
# #
# Add commands below that you want to be executed after shorewall6 has # Add commands below that you want to be executed after shorewall6 has
# been completely started or restarted. The difference between this # been completely started or restarted. The difference between this
# extension script and /etc/shorewall6/start is that this one is invoked # extension script and /etc/shorewall6/start is that this one is invoked
# after the 'shorewall' chain has been created (thus signaling that the # after the 'shorewall' chain has been created (thus signaling that the
# firewall is completely up). # firewall is completely up).
# #
# This script should not change the firewall configuration directly but # This script should not change the firewall configuration directly but
# may do so indirectly by running /sbin/shorewall6 with the 'nolock' # may do so indirectly by running /sbin/shorewall6 with the 'nolock'
# option. # option.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall6/stop # /etc/shorewall6/stop
# #
# Add commands below that you want to be executed at the beginning of a # Add commands below that you want to be executed at the beginning of a
# "shorewall6 stop" command. # "shorewall6 stop" command.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -3,8 +3,8 @@
# #
# /etc/shorewall6/stopped # /etc/shorewall6/stopped
# #
# Add commands below that you want to be executed at the completion of a # Add commands below that you want to be executed at the completion of a
# "shorewal6l stop" command. # "shorewall6 stop" command.
# #
# See http://shorewall.net/shorewall_extension_scripts.htm for additional # See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information. # information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Stoppedrules File # Shorewall6 - Stoppedrules File
# #
# /etc/shorewall6/stoppedrules
#
# For information about entries in this file, # For information about entries in this file,
# type "man shorewall6-stoppedrules" # type "man shorewall6-stoppedrules"
# #

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Tcclasses File # Shorewall6 - Tcclasses File
# #
# /etc/shorewall6/tcclasses
#
# For information about entries in this file, type "man shorewall6-tcclasses" # For information about entries in this file, type "man shorewall6-tcclasses"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Tcdevices File # Shorewall6 - Tcdevices File
# #
# /etc/shorewall6/tcdevices
#
# For information about entries in this file, type "man shorewall6-tcdevices" # For information about entries in this file, type "man shorewall6-tcdevices"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Tcfilters File # Shorewall6 - Tcfilters File
# #
# /etc/shorewall6/tcfilters
#
# For information about entries in this file, type "man shorewall6-tcfilters" # For information about entries in this file, type "man shorewall6-tcfilters"
# #
# See http://shorewall.net/traffic_shaping.htm for additional information. # See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Tcinterfaces File # Shorewall6 - Tcinterfaces File
# #
# /etc/shorewall6/tcinterfaces
#
# For information about entries in this file, # For information about entries in this file,
# type "man shorewall6-tcinterfaces" # type "man shorewall6-tcinterfaces"
# #

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Tcpri File # Shorewall6 - Tcpri File
# #
# /etc/shorewall6/tcpri
#
# For information about entries in this file, type "man shorewall6-tcpri" # For information about entries in this file, type "man shorewall6-tcpri"
# #
# See http://shorewall.net/simple_traffic_shaping.htm for additional # See http://shorewall.net/simple_traffic_shaping.htm for additional

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Tunnels File # Shorewall6 - Tunnels File
# #
# /etc/shorewall6/tunnels
#
# For information about entries in this file, type "man shorewall6-tunnels" # For information about entries in this file, type "man shorewall6-tunnels"
# #
# The manpage is also online at # The manpage is also online at

View File

@ -1,6 +1,8 @@
# #
# Shorewall6 - Zones File # Shorewall6 - Zones File
# #
# /etc/shorewall6/zones
#
# For information about this file, type "man shorewall6-zones" # For information about this file, type "man shorewall6-zones"
# #
# The manpage is also online at # The manpage is also online at