macro.IPPserver: update macro header and description

Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini 2016-02-15 18:20:39 +02:00
parent 42438c817a
commit 9ce2df55d1

View File

@ -1,29 +1,28 @@
#
# Shorewall - IPPserver Macro
# Shorewall -- /usr/share/shorewall/macro.IPPserver
#
# /usr/share/shorewall/macro.IPPserver
# This macro handles Internet Printing Protocol (IPP), indicating
# that DEST is a printing server for SOURCE. The macro allows
# print queue broadcasts from the server to the client, and
# printing connections from the client to the server.
#
# This macro handles Internet Printing Protocol (IPP), indicating
# that DEST is a printing server for SOURCE. The macro allows
# print queue broadcasts from the server to the client, and
# printing connections from the client to the server.
# Example usage on a single-interface firewall which is a print client:
#
# Example usage on a single-interface firewall which is a print
# client:
# IPPserver/ACCEPT $FW net
# IPPserver(ACCEPT) $FW net
#
# Example for a two-interface firewall which acts as a print
# server for loc:
# IPPserver/ACCEPT loc $FW
# Example for a two-interface firewall which acts as a print server for loc:
#
# NOTE: If you want both to serve requests for local printers and
# listen to requests for remote printers (i.e. your CUPS server is
# also a client), you need to apply the rule twice, e.g.
# IPPserver/ACCEPT loc $FW
# IPPserver/ACCEPT $FW loc
# IPPserver(ACCEPT) loc $FW
#
# NOTE: If you want both to serve requests for local printers and listen to
# requests for remote printers (i.e. your CUPS server is also a client),
# you need to apply the rule twice, e.g.
#
# IPPserver(ACCEPT) loc $FW
# IPPserver(ACCEPT) $FW loc
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM SOURCE DEST tcp 631
PARAM DEST SOURCE udp 631