From 9ce2df55d180c3d523b634ec28efb823d57acb29 Mon Sep 17 00:00:00 2001 From: Tuomo Soini Date: Mon, 15 Feb 2016 18:20:39 +0200 Subject: [PATCH] macro.IPPserver: update macro header and description Signed-off-by: Tuomo Soini --- Shorewall/Macros/macro.IPPserver | 37 ++++++++++++++++---------------- 1 file changed, 18 insertions(+), 19 deletions(-) diff --git a/Shorewall/Macros/macro.IPPserver b/Shorewall/Macros/macro.IPPserver index 37a8485ae..595bac669 100644 --- a/Shorewall/Macros/macro.IPPserver +++ b/Shorewall/Macros/macro.IPPserver @@ -1,29 +1,28 @@ # -# Shorewall - IPPserver Macro +# Shorewall -- /usr/share/shorewall/macro.IPPserver # -# /usr/share/shorewall/macro.IPPserver +# This macro handles Internet Printing Protocol (IPP), indicating +# that DEST is a printing server for SOURCE. The macro allows +# print queue broadcasts from the server to the client, and +# printing connections from the client to the server. # -# This macro handles Internet Printing Protocol (IPP), indicating -# that DEST is a printing server for SOURCE. The macro allows -# print queue broadcasts from the server to the client, and -# printing connections from the client to the server. +# Example usage on a single-interface firewall which is a print client: # -# Example usage on a single-interface firewall which is a print -# client: -# IPPserver/ACCEPT $FW net +# IPPserver(ACCEPT) $FW net # -# Example for a two-interface firewall which acts as a print -# server for loc: -# IPPserver/ACCEPT loc $FW +# Example for a two-interface firewall which acts as a print server for loc: # -# NOTE: If you want both to serve requests for local printers and -# listen to requests for remote printers (i.e. your CUPS server is -# also a client), you need to apply the rule twice, e.g. -# IPPserver/ACCEPT loc $FW -# IPPserver/ACCEPT $FW loc +# IPPserver(ACCEPT) loc $FW +# +# NOTE: If you want both to serve requests for local printers and listen to +# requests for remote printers (i.e. your CUPS server is also a client), +# you need to apply the rule twice, e.g. +# +# IPPserver(ACCEPT) loc $FW +# IPPserver(ACCEPT) $FW loc # ############################################################################### -#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/ -# PORT(S) PORT(S) DEST LIMIT GROUP +#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER + PARAM SOURCE DEST tcp 631 PARAM DEST SOURCE udp 631