From 96da9c2f2691d22638aee68d5bee699d504b08d7 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Thu, 3 Nov 2011 11:03:17 -0700 Subject: [PATCH] Add DropSmurfs and TCPFlags to the IPv6 actions.std file. Signed-off-by: Tom Eastep --- Shorewall6/actions.std | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Shorewall6/actions.std b/Shorewall6/actions.std index e3be0b3e6..4dd131720 100644 --- a/Shorewall6/actions.std +++ b/Shorewall6/actions.std @@ -25,6 +25,9 @@ A_AllowICMPs # Audited Accept needed ICMP6 types AllowICMPs # Accept needed ICMP6 types Broadcast # Handles Broadcast/Multicast/Anycast Drop # Default Action for DROP policy +DropSmurfs # Handles packets with a broadcast source address Invalid # Handles packets in the INVALID conntrack state NotSyn # Handles TCP packets that do not have SYN=1 and ACK=0 Reject # Default Action for REJECT policy +TCPFlags # Handles bad flags combinations +