extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-26 04:32:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update samples for EXPAND_POLICIES

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6912 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-07-20 15:26:23 +00:00
parent 1531296ebc
commit 6269a6f18a
4 changed files with 24 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Samples/three-interfaces/policy
View File

@ -22,7 +22,16 @@
# zones defined in this sample. This is solely for the purpose of # zones defined in this sample. This is solely for the purpose of
# providing more specific messages in the logs. This is not # providing more specific messages in the logs. This is not
# necessary for correct operation of the firewall, but greatly # necessary for correct operation of the firewall, but greatly
# assists in diagnosing problems. # assists in diagnosing problems. The policies below are logically
# equivalent to:
#
# loc net ACCEPT
# net all DROP info
# all all REJECT info
#
# The Shorewall-perl compiler will generate the individual policies
# below from the above general policies if you set
# EXPAND_POLICIES=Yes in shorewall.conf.
# #
# #

2
Samples/three-interfaces/shorewall.conf
View File

@ -166,6 +166,8 @@ OPTIMIZE=1
EXPORTPARAMS=No EXPORTPARAMS=No
EXPAND_POLICIES=No
############################################################################### ###############################################################################
# P A C K E T D I S P O S I T I O N # P A C K E T D I S P O S I T I O N
############################################################################### ###############################################################################

12
Samples/two-interfaces/policy
View File

@ -22,10 +22,18 @@
# zones defined in this sample. This is solely for the purpose of # zones defined in this sample. This is solely for the purpose of
# providing more specific messages in the logs. This is not # providing more specific messages in the logs. This is not
# necessary for correct operation of the firewall, but greatly # necessary for correct operation of the firewall, but greatly
# assists in diagnosing problems. # assists in diagnosing problems. The policies below are logically
# equivalent to:
#
# loc net ACCEPT
# net all DROP info
# all all REJECT info
#
# The Shorewall-perl compiler will generate the individual policies
# below from the above general policies if you set
# EXPAND_POLICIES=Yes in shorewall.conf.
# #
#
# Policies for traffic originating from the local LAN (loc) # Policies for traffic originating from the local LAN (loc)
# #
# If you want to force clients to access the Internet via a proxy server # If you want to force clients to access the Internet via a proxy server

2
Samples/two-interfaces/shorewall.conf
View File

@ -165,6 +165,8 @@ OPTIMIZE=1
EXPORTPARAMS=No EXPORTPARAMS=No
EXPAND_POLICIES=No
############################################################################### ###############################################################################
# P A C K E T D I S P O S I T I O N # P A C K E T D I S P O S I T I O N
############################################################################### ###############################################################################