action.IfEvent: reformat to new header style

Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini 2016-04-05 20:13:55 +03:00
parent de44a16094
commit 2842e897c9

View File

@ -1,34 +1,38 @@
# #
# Shorewall version 5 - Perform an Action based on a Event # Shorewall -- /usr/share/shorewall/action.IfEvent
# #
# /etc/shorewall/action.IfEvent # Perform an Action based on a Event
# #
# Parameters: # Parameters:
# Event: Must start with a letter and be composed of letters, digits, '-', and '_'.
# Action: Anything that can appear in the ACTION column of a rule.
# Duration: Duration in seconds over which the event is to be tested.
# Hit Count: Number of packets seen within the duration -- default is 1
# Src or Dest: 'src' (default) or 'dst'. Determines if the event is associated with the source
# address (src) or destination address (dst)
# Command: 'check' (default) 'reset', or 'update'. If 'reset', the event will be reset before
# the Action is taken. If 'update', the timestamp associated with the event will
# be updated and the action taken if the time limit/hitcount are matched.
# If '-', the action will be taken if the limit/hitcount are matched but the
# event's timestamp will not be updated.
# #
# If a duration is specified, then 'checkreap' and 'updatereap' may also # Event - Must start with a letter and be composed of letters, digits,
# be used. These are like 'check' and 'update' respectively, but they also # '-', and '_'.
# remove any event entries for the IP address that are older than <duration> # Action - Anything that can appear in the ACTION column of a rule.
# seconds. # Duration - Duration in seconds over which the event is to be tested.
# Disposition: Disposition for any event generated. # Hit Count - Number of packets seen within the duration -- default is 1
# Src or Dest - 'src' (default) or 'dst'. Determines if the event is
# associated with the source address (src) or destination
# address (dst)
# Command - 'check' (default) 'reset', or 'update'. If 'reset',
# the event will be reset before the Action is taken.
# If 'update', the timestamp associated with the event will
# be updated and the action taken if the time limit/hitcount
# are matched.
# If '-', the action will be taken if the limit/hitcount are
# matched but the event's timestamp will not be updated.
#
# If a duration is specified, then 'checkreap' and 'updatereap'
# may also be used. These are like 'check' and 'update'
# respectively, but they also remove any event entries for
# the IP address that are older than <duration> seconds.
# Disposition - Disposition for any event generated.
# #
# For additional information, see http://www.shorewall.net/Events.html # For additional information, see http://www.shorewall.net/Events.html
# #
####################################################################################################### ###############################################################################
# DO NOT REMOVE THE FOLLOWING LINE # DO NOT REMOVE THE FOLLOWING LINE
################################################################################################################################################################################################# ###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK CONNLIMIT TIME HEADERS SWITCH HELPER #ACTION SOURCE DEST PROTO DPORT SPORT
# PORT PORT(S) DEST LIMIT GROUP
DEFAULTS -,ACCEPT,-,1,src,check,- DEFAULTS -,ACCEPT,-,1,src,check,-