extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-12 04:37:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Reverse order of ICMPv6 and Multicast/anycast filtering

Browse Source
This commit is contained in:
Tom Eastep 2010-07-13 13:03:55 -07:00
parent d447482dd6
commit a29921c9d2
3 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/action.Drop
View File

@ -3,7 +3,7 @@
# #
# /usr/share/shorewall/action.Drop # /usr/share/shorewall/action.Drop
# #
# The default DROP common rules # The default DROP common rules1
# #
# This action is invoked before a DROP policy is enforced. The purpose # This action is invoked before a DROP policy is enforced. The purpose
# of the action is: # of the action is:

8
Shorewall6/action.Drop
View File

@ -24,15 +24,15 @@
# #
Auth(REJECT) Auth(REJECT)
# #
# ACCEPT critical ICMP types
#
AllowICMPs - - ipv6-icmp
#
# Drop Broadcasts so they don't clutter up the log # Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected). # (broadcasts must *not* be rejected).
# #
dropBcast dropBcast
# #
# ACCEPT critical ICMP types
#
AllowICMPs - - ipv6-icmp
#
# Drop packets that are in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log. # and just confuse people when they appear in the log.
# #

9
Shorewall6/action.Reject
View File

@ -23,12 +23,13 @@ Auth(REJECT)
# Drop Multicasts so they don't clutter up the log # Drop Multicasts so they don't clutter up the log
# (broadcasts must *not* be rejected). # (broadcasts must *not* be rejected).
# #
dropBcast
#
# ACCEPT critical ICMP types
#
AllowICMPs - - ipv6-icmp AllowICMPs - - ipv6-icmp
# #
# Drop Broadcasts so they don't clutter up the log
# (broadcasts must *not* be rejected).
#
dropBcast
#
# Drop packets that are in the INVALID state -- these are usually ICMP packets # Drop packets that are in the INVALID state -- these are usually ICMP packets
# and just confuse people when they appear in the log (these ICMPs cannot be # and just confuse people when they appear in the log (these ICMPs cannot be
# rejected). # rejected).