extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-08 00:34:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

Document Universal Configuration

Browse Source
This commit is contained in:
Tom Eastep 2010-07-31 11:59:25 -07:00
parent 375010d602
commit 4e02031985
10 changed files with 21 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Samples/Universal/interfaces
View File

@ -8,5 +8,5 @@
#
###############################################################################
#ZONE INTERFACE BROADCAST OPTIONS
world all - dhcp,physical=+,routeback
net all - dhcp,physical=+,routeback

4
Samples/Universal/policy
View File

@ -9,5 +9,5 @@
###############################################################################
#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK
$FW world ACCEPT
world all DROP info
$FW net ACCEPT
net all DROP info

4
Samples/Universal/rules
View File

@ -13,5 +13,5 @@
#SECTION RELATED
SECTION NEW
SSH(ACCEPT) world $FW
Ping(ACCEPT) world $FW
SSH(ACCEPT) net $FW
Ping(ACCEPT) net $FW

2
Samples/Universal/zones
View File

@ -10,5 +10,5 @@
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
world ip
net ip

2
Samples6/Universal/interfaces
View File

@ -8,5 +8,5 @@
#
###############################################################################
#ZONE INTERFACE BROADCAST OPTIONS
world all - dhcp,physical=+,routeback
net all - dhcp,physical=+,routeback

4
Samples6/Universal/policy
View File

@ -9,6 +9,6 @@
###############################################################################
#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK
fw world ACCEPT
world all DROP
fw net ACCEPT
net all DROP

4
Samples6/Universal/rules
View File

@ -13,5 +13,5 @@
#SECTION RELATED
SECTION NEW
SSH(ACCEPT) world $FW
Ping(ACCEPT) world $FW
SSH(ACCEPT) net $FW
Ping(ACCEPT) net $FW

2
Samples6/Universal/zones
View File

@ -10,5 +10,5 @@
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
world ip
net ip

2
Shorewall/changelog.txt
View File

@ -12,6 +12,8 @@ Changes in Shorewall 4.4.12
6) Use new hashlimit match syntax if available.
7) Add Universal sample.
Changes in Shorewall 4.4.11
1) Apply patch from Gabriel.

7
Shorewall/releasenotes.txt
View File

@ -71,6 +71,9 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
16) Explicit support for Linux-vserver has been added. It is now
possible to define sub-zones of $FW.
17) A 'Universal' sample configuration is now availale for a
'plug-and-play' firewall.
----------------------------------------------------------------------------
I I. M I G R A T I O N I S S U E S
----------------------------------------------------------------------------
@ -272,6 +275,10 @@ None.
<unit> is one of sec, min, hour, day.
If <burst> is not specified, then a value of 5 is assumed.
3) The sample configurations now include a 'Universal' configuration
that will start on any system and protect that system while
allowing the system to forward traffic.
----------------------------------------------------------------------------
V I. P R O B L E M S C O R R E C T E D A N D N E W F E A T U R E S