extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-22 22:30:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Document ICMP codes

Browse Source
This commit is contained in:
Tom Eastep 2009-11-05 11:58:54 -08:00
parent b4199fd068
commit 7e21488aec
5 changed files with 18 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/configuration_file_basics.xml
View File

@ -1007,8 +1007,7 @@ Shorewall has detected the following iptables/netfilter capabilities:
Packet Type Match: Not available Packet Type Match: Not available
Policy Match: Available Policy Match: Available
Physdev Match: Available Physdev Match: Available
<emphasis role="bold">IP range Match: Available &lt;-------------- <emphasis role="bold">IP range Match: Available &lt;--------------</emphasis></programlisting>
</emphasis></programlisting>
</section> </section>
<section id="Ports"> <section id="Ports">
@ -1028,7 +1027,7 @@ Shorewall has detected the following iptables/netfilter capabilities:
"!tcp").</para> "!tcp").</para>
</section> </section>
<section> <section id="ICMP">
<title>ICMP and ICMP6 Types and Codes</title> <title>ICMP and ICMP6 Types and Codes</title>
<para>When dealing with ICMP, the DEST PORT specifies the type or type and <para>When dealing with ICMP, the DEST PORT specifies the type or type and

5
manpages/shorewall-rules.xml
View File

@ -752,7 +752,10 @@
<para>Destination Ports. A comma-separated list of Port names (from <para>Destination Ports. A comma-separated list of Port names (from
services(5)), port numbers or port ranges; if the protocol is services(5)), port numbers or port ranges; if the protocol is
<emphasis role="bold">icmp</emphasis>, this column is interpreted as <emphasis role="bold">icmp</emphasis>, this column is interpreted as
the destination icmp-type(s).</para> the destination icmp-type(s). ICMP types may be specified as a
numeric type, a numberic type and code separated by a slash (e.g.,
3/4), or a typename. See <ulink
url="http://www.shorewall.net/configuration_file_basics.htm#ICMP">http://www.shorewall.net/configuration_file_basics.htm#ICMP</ulink>.</para>
<para>If the protocol is <emphasis role="bold">ipp2p</emphasis>, <para>If the protocol is <emphasis role="bold">ipp2p</emphasis>,
this column is interpreted as an ipp2p option without the leading this column is interpreted as an ipp2p option without the leading

5
manpages/shorewall-tcrules.xml
View File

@ -498,7 +498,10 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
services(5)), <emphasis>port number</emphasis>s or <emphasis>port services(5)), <emphasis>port number</emphasis>s or <emphasis>port
range</emphasis>s; if the protocol is <emphasis range</emphasis>s; if the protocol is <emphasis
role="bold">icmp</emphasis>, this column is interpreted as the role="bold">icmp</emphasis>, this column is interpreted as the
destination icmp-type(s).</para> destination icmp-type(s). ICMP types may be specified as a numeric
type, a numberic type and code separated by a slash (e.g., 3/4), or
a typename. See <ulink
url="http://www.shorewall.net/configuration_file_basics.htm#ICMP">http://www.shorewall.net/configuration_file_basics.htm#ICMP</ulink>.</para>
<para>If the protocol is <emphasis role="bold">ipp2p</emphasis>, <para>If the protocol is <emphasis role="bold">ipp2p</emphasis>,
this column is interpreted as an ipp2p option without the leading this column is interpreted as an ipp2p option without the leading

5
manpages6/shorewall6-rules.xml
View File

@ -591,7 +591,10 @@
<para>Destination Ports. A comma-separated list of Port names (from <para>Destination Ports. A comma-separated list of Port names (from
services(5)), port numbers or port ranges; if the protocol is services(5)), port numbers or port ranges; if the protocol is
<emphasis role="bold">icmp</emphasis>, this column is interpreted as <emphasis role="bold">icmp</emphasis>, this column is interpreted as
the destination icmp-type(s).</para> the destination icmp-type(s). ICMP types may be specified as a
numeric type, a numberic type and code separated by a slash (e.g.,
3/4), or a typename. See <ulink
url="http://www.shorewall.net/configuration_file_basics.htm#ICMP">http://www.shorewall.net/configuration_file_basics.htm#ICMP</ulink>.</para>
<para>If the protocol is <emphasis role="bold">ipp2p</emphasis>, <para>If the protocol is <emphasis role="bold">ipp2p</emphasis>,
this column is interpreted as an ipp2p option without the leading this column is interpreted as an ipp2p option without the leading

5
manpages6/shorewall6-tcrules.xml
View File

@ -367,7 +367,10 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
services(5)), <emphasis>port number</emphasis>s or <emphasis>port services(5)), <emphasis>port number</emphasis>s or <emphasis>port
range</emphasis>s; if the protocol is <emphasis range</emphasis>s; if the protocol is <emphasis
role="bold">icmp</emphasis>, this column is interpreted as the role="bold">icmp</emphasis>, this column is interpreted as the
destination icmp-type(s).</para> destination icmp-type(s). ICMP types may be specified as a numeric
type, a numberic type and code separated by a slash (e.g., 3/4), or
a typename. See <ulink
url="http://www.shorewall.net/configuration_file_basics.htm#ICMP">http://www.shorewall.net/configuration_file_basics.htm#ICMP</ulink>.</para>
<para>If the protocol is <emphasis role="bold">ipp2p</emphasis>, <para>If the protocol is <emphasis role="bold">ipp2p</emphasis>,
this column is interpreted as an ipp2p option without the leading this column is interpreted as an ipp2p option without the leading