extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-05-18 23:20:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

Document Universal Configuration

Browse Source
This commit is contained in:
Tom Eastep 2010-07-31 11:59:25 -07:00
parent 375010d602
commit 4e02031985
10 changed files with 21 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Samples/Universal/interfaces
View File

@ -8,5 +8,5 @@
# #
############################################################################### ###############################################################################
#ZONE INTERFACE BROADCAST OPTIONS #ZONE INTERFACE BROADCAST OPTIONS
world all - dhcp,physical=+,routeback net all - dhcp,physical=+,routeback

4
Samples/Universal/policy
View File

@ -9,5 +9,5 @@
############################################################################### ###############################################################################
#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT: #SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK # LEVEL BURST MASK
$FW world ACCEPT $FW net ACCEPT
world all DROP info net all DROP info

4
Samples/Universal/rules
View File

@ -13,5 +13,5 @@
#SECTION RELATED #SECTION RELATED
SECTION NEW SECTION NEW
SSH(ACCEPT) world $FW SSH(ACCEPT) net $FW
Ping(ACCEPT) world $FW Ping(ACCEPT) net $FW

2
Samples/Universal/zones
View File

@ -10,5 +10,5 @@
#ZONE TYPE OPTIONS IN OUT #ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS # OPTIONS OPTIONS
fw firewall fw firewall
world ip net ip

2
Samples6/Universal/interfaces
View File

@ -8,5 +8,5 @@
# #
############################################################################### ###############################################################################
#ZONE INTERFACE BROADCAST OPTIONS #ZONE INTERFACE BROADCAST OPTIONS
world all - dhcp,physical=+,routeback net all - dhcp,physical=+,routeback

4
Samples6/Universal/policy
View File

@ -9,6 +9,6 @@
############################################################################### ###############################################################################
#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT: #SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK # LEVEL BURST MASK
fw world ACCEPT fw net ACCEPT
world all DROP net all DROP

4
Samples6/Universal/rules
View File

@ -13,5 +13,5 @@
#SECTION RELATED #SECTION RELATED
SECTION NEW SECTION NEW
SSH(ACCEPT) world $FW SSH(ACCEPT) net $FW
Ping(ACCEPT) world $FW Ping(ACCEPT) net $FW

2
Samples6/Universal/zones
View File

@ -10,5 +10,5 @@
#ZONE TYPE OPTIONS IN OUT #ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS # OPTIONS OPTIONS
fw firewall fw firewall
world ip net ip

2
Shorewall/changelog.txt
View File

@ -12,6 +12,8 @@ Changes in Shorewall 4.4.12
6) Use new hashlimit match syntax if available. 6) Use new hashlimit match syntax if available.
7) Add Universal sample.
Changes in Shorewall 4.4.11 Changes in Shorewall 4.4.11
1) Apply patch from Gabriel. 1) Apply patch from Gabriel.

7
Shorewall/releasenotes.txt
View File

@ -71,6 +71,9 @@ VI. PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
16) Explicit support for Linux-vserver has been added. It is now 16) Explicit support for Linux-vserver has been added. It is now
possible to define sub-zones of $FW. possible to define sub-zones of $FW.
17) A 'Universal' sample configuration is now availale for a
'plug-and-play' firewall.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
I I. M I G R A T I O N I S S U E S I I. M I G R A T I O N I S S U E S
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
@ -272,6 +275,10 @@ None.
<unit> is one of sec, min, hour, day. <unit> is one of sec, min, hour, day.
If <burst> is not specified, then a value of 5 is assumed. If <burst> is not specified, then a value of 5 is assumed.
3) The sample configurations now include a 'Universal' configuration
that will start on any system and protect that system while
allowing the system to forward traffic.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
V I. P R O B L E M S C O R R E C T E D A N D N E W F E A T U R E S V I. P R O B L E M S C O R R E C T E D A N D N E W F E A T U R E S