Convert macro.AllowICMPs to a standard action

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-12-13 21:19:27 +00:00
parent dc2e7a9922
commit 4c409b4586
4 changed files with 15 additions and 6 deletions

View File

@ -49,6 +49,14 @@ Other changes in 4.3.3
'start' processing. If the kernel version is less than 2.6.25, a
fatal error is generated.
5) The AllowICMPs macro has been converted to a standard action. This
allows for more efficient processing in the case where ipv6-icmp is
specified as the PROTO in the invocation of AllowICMPs.
e.g.,
AllowICMPs $FW net ipv6-icmp
Migration Issues.
None.

View File

@ -1,14 +1,13 @@
#
# Shorewall6 version 4 - AllowICMPs Macro
# Shorewall6 version 4 - AllowICMPs Action
#
# /usr/share/shorewall6/macro.AllowICMPs
# /usr/share/shorewall6/action.AllowICMPs
#
# This macro ACCEPTs needed ICMP types
# This action ACCEPTs needed ICMP types
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/
# PORT(S) PORT(S) LIMIT GROUP
#TARGET SOURCE DEST PROTO DEST
# PORT(S)
COMMENT Needed ICMP types (RFC4890)
ACCEPT - - ipv6-icmp destination-unreachable

View File

@ -19,6 +19,7 @@
#
###############################################################################
#ACTION
AllowICMPs # Accept needed ICMP6 types
Drop # Default Action for DROP policy
Reject # Default Action for REJECT policy
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

View File

@ -104,6 +104,7 @@ fi
%attr(0644,root,root) /usr/share/shorewall6/version
%attr(0644,root,root) /usr/share/shorewall6/actions.std
%attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.Drop
%attr(0644,root,root) /usr/share/shorewall6/action.Reject
%attr(0644,root,root) /usr/share/shorewall6/action.template