extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-04-07 15:59:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Replace 'fw' with '' in samples

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2669 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2005-09-12 17:42:30 +00:00
parent 017027132e
commit 6c37f6ef25
3 changed files with 27 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Samples/one-interface/rules
View File

@ -365,7 +365,7 @@
# #
# #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL
# # PORT PORT(S) DEST # # PORT PORT(S) DEST
# ACCEPT net:130.252.100.69,130.252.100.70 fw \ # ACCEPT net:130.252.100.69,130.252.100.70 $FW \
# tcp 22 # tcp 22
############################################################################################################# #############################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
@ -373,10 +373,10 @@
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded.. # Reject Ping from the "bad" net zone.. and prevent your log from being flooded..
Ping/REJECT:none! net fw Ping/REJECT:none! net $FW
# Permit all ICMP traffic FROM the firewall TO the net zone # Permit all ICMP traffic FROM the firewall TO the net zone
ACCEPT fw net icmp ACCEPT $FW net icmp
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

22
Samples/three-interfaces/rules
View File

@ -365,20 +365,20 @@
# #
# #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL
# # PORT PORT(S) DEST # # PORT PORT(S) DEST
# ACCEPT net:130.252.100.69,130.252.100.70 fw \ # ACCEPT net:130.252.100.69,130.252.100.70 $FW \
# tcp 22 # tcp 22
############################################################################################################# #############################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
# PORT PORT(S) DEST LIMIT GROUP # PORT PORT(S) DEST LIMIT GROUP
# #
# Accept DNS connections from the firewall to the Internet # Accept DNS connections from the firewall to the Internet
# #
DNS/ACCEPT fw net DNS/ACCEPT $FW net
# #
# #
# Accept SSH connections from the local network to the firewall and DMZ # Accept SSH connections from the local network to the firewall and DMZ
# #
SSH/ACCEPT loc fw SSH/ACCEPT loc $FW
SSH/ACCEPT loc dmz SSH/ACCEPT loc dmz
# #
# DMZ DNS access to the Internet # DMZ DNS access to the Internet
@ -388,22 +388,22 @@ DNS/ACCEPT dmz net
# Reject Ping from the "bad" net zone. # Reject Ping from the "bad" net zone.
Ping/REJECT:none! net fw Ping/REJECT net $FW
# #
# Make ping work bi-directionally between the dmz, net, Firewall and local zone # Make ping work bi-directionally between the dmz, net, Firewall and local zone
# (assumes that the loc-> net policy is ACCEPT). # (assumes that the loc-> net policy is ACCEPT).
# #
Ping/ACCEPT loc fw Ping/ACCEPT loc $FW
Ping/ACCEPT dmz fw Ping/ACCEPT dmz $FW
Ping/ACCEPT loc dmz Ping/ACCEPT loc dmz
Ping/ACCEPT dmz loc Ping/ACCEPT dmz loc
Ping/ACCEPT dmz net Ping/ACCEPT dmz net
ACCEPT fw net icmp ACCEPT $FW net icmp
ACCEPT fw loc icmp ACCEPT $FW loc icmp
ACCEPT fw dmz icmp ACCEPT $FW dmz icmp
# Uncomment this if using Proxy ARP and static NAT and you want to allow ping from # Uncomment this if using Proxy ARP and static NAT and you want to allow ping from
# the net zone to the dmz and loc # the net zone to the dmz and loc

26
Samples/two-interfaces/rules
View File

@ -365,33 +365,33 @@
# #
# #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL # #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL
# # PORT PORT(S) DEST # # PORT PORT(S) DEST
# ACCEPT net:130.252.100.69,130.252.100.70 fw \ # ACCEPT net:130.252.100.69,130.252.100.70 $FW \
# tcp 22 # tcp 22
############################################################################################################# #############################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
# PORT PORT(S) DEST LIMIT GROUP # PORT PORT(S) DEST LIMIT GROUP
# PORT PORT(S) DEST LIMIT GROUP # PORT PORT(S) DEST LIMIT GROUP
# #
# Accept DNS connections from the firewall to the network # Accept DNS connections from the firewall to the network
# #
DNS/ACCEPT fw net DNS/ACCEPT $FW net
# #
# Accept SSH connections from the local network for administration # Accept SSH connections from the local network for administration
# #
SSH/ACCEPT loc fw SSH/ACCEPT loc $FW
# #
# Allow Ping from the local network # Allow Ping from the local network
# #
Ping/ACCEPT loc fw Ping/ACCEPT loc $FW
# #
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded.. # Reject Ping from the "bad" net zone.. and prevent your log from being flooded..
# #
Ping/REJECT:none! net fw Ping/REJECT net $FW
ACCEPT fw loc icmp ACCEPT $FW loc icmp
ACCEPT fw net icmp ACCEPT $FW net icmp
# #
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE