extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-29 19:13:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

Convert macro.AllowICMPs to a standard action

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9037 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-12-13 21:19:27 +00:00
parent dc2e7a9922
commit 4c409b4586
4 changed files with 15 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Shorewall-common/releasenotes.txt
View File

@ -49,6 +49,14 @@ Other changes in 4.3.3
'start' processing. If the kernel version is less than 2.6.25, a 'start' processing. If the kernel version is less than 2.6.25, a
fatal error is generated. fatal error is generated.
5) The AllowICMPs macro has been converted to a standard action. This
allows for more efficient processing in the case where ipv6-icmp is
specified as the PROTO in the invocation of AllowICMPs.
e.g.,
AllowICMPs $FW net ipv6-icmp
Migration Issues. Migration Issues.
None. None.

11
Shorewall6/macro.AllowICMPs → Shorewall6/action.AllowICMPs
View File

@ -1,14 +1,13 @@
# #
# Shorewall6 version 4 - AllowICMPs Macro # Shorewall6 version 4 - AllowICMPs Action
# #
# /usr/share/shorewall6/macro.AllowICMPs # /usr/share/shorewall6/action.AllowICMPs
# #
# This macro ACCEPTs needed ICMP types # This action ACCEPTs needed ICMP types
# #
############################################################################### ###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/ #TARGET SOURCE DEST PROTO DEST
# PORT(S) PORT(S) LIMIT GROUP # PORT(S)
COMMENT Needed ICMP types (RFC4890) COMMENT Needed ICMP types (RFC4890)
ACCEPT - - ipv6-icmp destination-unreachable ACCEPT - - ipv6-icmp destination-unreachable

1
Shorewall6/actions.std
View File

@ -19,6 +19,7 @@
# #
############################################################################### ###############################################################################
#ACTION #ACTION
AllowICMPs # Accept needed ICMP6 types
Drop # Default Action for DROP policy Drop # Default Action for DROP policy
Reject # Default Action for REJECT policy Reject # Default Action for REJECT policy
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE #LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

1
Shorewall6/shorewall6.spec
View File

@ -104,6 +104,7 @@ fi
%attr(0644,root,root) /usr/share/shorewall6/version %attr(0644,root,root) /usr/share/shorewall6/version
%attr(0644,root,root) /usr/share/shorewall6/actions.std %attr(0644,root,root) /usr/share/shorewall6/actions.std
%attr(0644,root,root) /usr/share/shorewall6/action.AllowICMPs
%attr(0644,root,root) /usr/share/shorewall6/action.Drop %attr(0644,root,root) /usr/share/shorewall6/action.Drop
%attr(0644,root,root) /usr/share/shorewall6/action.Reject %attr(0644,root,root) /usr/share/shorewall6/action.Reject
%attr(0644,root,root) /usr/share/shorewall6/action.template %attr(0644,root,root) /usr/share/shorewall6/action.template