macro.IPPserver: update macro header and description

Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini 2016-02-15 18:20:39 +02:00
parent 42438c817a
commit 9ce2df55d1

View File

@ -1,29 +1,28 @@
# #
# Shorewall - IPPserver Macro # Shorewall -- /usr/share/shorewall/macro.IPPserver
#
# /usr/share/shorewall/macro.IPPserver
# #
# This macro handles Internet Printing Protocol (IPP), indicating # This macro handles Internet Printing Protocol (IPP), indicating
# that DEST is a printing server for SOURCE. The macro allows # that DEST is a printing server for SOURCE. The macro allows
# print queue broadcasts from the server to the client, and # print queue broadcasts from the server to the client, and
# printing connections from the client to the server. # printing connections from the client to the server.
# #
# Example usage on a single-interface firewall which is a print # Example usage on a single-interface firewall which is a print client:
# client:
# IPPserver/ACCEPT $FW net
# #
# Example for a two-interface firewall which acts as a print # IPPserver(ACCEPT) $FW net
# server for loc:
# IPPserver/ACCEPT loc $FW
# #
# NOTE: If you want both to serve requests for local printers and # Example for a two-interface firewall which acts as a print server for loc:
# listen to requests for remote printers (i.e. your CUPS server is #
# also a client), you need to apply the rule twice, e.g. # IPPserver(ACCEPT) loc $FW
# IPPserver/ACCEPT loc $FW #
# IPPserver/ACCEPT $FW loc # NOTE: If you want both to serve requests for local printers and listen to
# requests for remote printers (i.e. your CUPS server is also a client),
# you need to apply the rule twice, e.g.
#
# IPPserver(ACCEPT) loc $FW
# IPPserver(ACCEPT) $FW loc
# #
############################################################################### ###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/ #ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM SOURCE DEST tcp 631 PARAM SOURCE DEST tcp 631
PARAM DEST SOURCE udp 631 PARAM DEST SOURCE udp 631