extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-03 20:19:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Macro conversion

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9025 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-12-13 18:22:42 +00:00
parent f5b950f7a6
commit a47c9b9871
72 changed files with 140 additions and 240 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall6/accounting
View File

@ -1,5 +1,5 @@
# #
# Shorewall version 4 - Accounting File # Shorewall6 version 4 - Accounting File
# #
# For information about entries in this file, type "man shorewall-accounting" # For information about entries in this file, type "man shorewall-accounting"
# #

4
Shorewall6/action.Drop
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Drop Action # Shorewall6 version 4 - Drop Action
# #
# /usr/share/shorewall/action.Drop # /usr/share/shorewall6/action.Drop
# #
# The default DROP common rules # The default DROP common rules
# #

4
Shorewall6/action.Reject
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Reject Action # Shorewall6 version 4 - Reject Action
# #
# /usr/share/shorewall/action.Reject # /usr/share/shorewall6/action.Reject
# #
# The default REJECT action common rules # The default REJECT action common rules
# #

35
Shorewall6/action.template
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Action Template # Shorewall6 version 4 - Action Template
# #
# /etc/shorewall/action.template # /etc/shorewall6/action.template
# #
# This file is a template for files with names of the form # This file is a template for files with names of the form
# /etc/shorewall/action.<action-name> where <action> is an # /etc/shorewall/action.<action-name> where <action> is an
@ -77,36 +77,12 @@
# address; mac addresses must begin with "~" and must use # address; mac addresses must begin with "~" and must use
# "-" as a separator. # "-" as a separator.
# #
# 192.168.2.2 Host 192.168.2.2
#
# 155.186.235.0/24 Subnet 155.186.235.0/24
#
# 10.0.0.4-10.0.0.9 Range of IP addresses; your
# kernel and iptables must have
# iprange match support.
#
# +remote The name of an ipset prefaced
# by "+". Your kernel and
# iptables must have set match
# support
#
# +remote[4] The name of the ipset may
# followed by a number of
# levels of ipset bindings
# enclosed in square brackets.
#
# 192.168.1.1,192.168.1.2
# Hosts 192.168.1.1 and
# 192.168.1.2.
# ~00-A0-C9-15-39-78 Host with
# MAC address 00:A0:C9:15:39:78.
#
# Alternatively, clients may be specified by interface # Alternatively, clients may be specified by interface
# name. For example, eth1 specifies a # name. For example, eth1 specifies a
# client that communicates with the firewall system # client that communicates with the firewall system
# through eth1. This may be optionally followed by # through eth1. This may be optionally followed by
# another colon (":") and an IP/MAC/subnet address # another colon (":") and an IP/MAC/subnet address
# as described above (e.g., eth1:192.168.1.5). # enclosed in square brackets.
# #
# DEST Location of destination host. Same as above with # DEST Location of destination host. Same as above with
# the exception that MAC addresses are not allowed and # the exception that MAC addresses are not allowed and
@ -116,7 +92,7 @@
# PROTO Protocol - Must be "tcp", "tcp:syn", "udp", "icmp", # PROTO Protocol - Must be "tcp", "tcp:syn", "udp", "icmp",
# "ipp2p", "ipp2p:udp", "ipp2p:all", a number, or "all". # "ipp2p", "ipp2p:udp", "ipp2p:all", a number, or "all".
# "ipp2p*" requires ipp2p match support in your kernel # "ipp2p*" requires ipp2p match support in your kernel
# and iptables. # and ip6tables.
# #
# "tcp:syn" implies "tcp" plus the SYN flag must be # "tcp:syn" implies "tcp" plus the SYN flag must be
# set and the RST, ACK and FIN flags must be reset. # set and the RST, ACK and FIN flags must be reset.
@ -190,9 +166,6 @@
# #the 'kids' group # #the 'kids' group
# !:kids #program must not be run by a member # !:kids #program must not be run by a member
# #of the 'kids' group # #of the 'kids' group
# +upnpd #program named upnpd (This feature was
# #removed from Netfilter in kernel
# #version 2.6.14).
# #
############################################################################### ###############################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ #TARGET SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/

6
Shorewall6/actions
View File

@ -1,9 +1,9 @@
# #
# Shorewall version 4 - Actions File # Shorewall6 version 4 - Actions File
# #
# /etc/shorewall/actions # /etc/shorewall6/actions
# #
# For information about entries in this file, type "man shorewall-actions" # For information about entries in this file, type "man shorewall6-actions"
# #
# Please see http://shorewall.net/Actions.html for additional information. # Please see http://shorewall.net/Actions.html for additional information.
# #

2
Shorewall6/actions.std
View File

@ -8,6 +8,8 @@
# #
# Builtin Actions are: # Builtin Actions are:
# #
# allowBcasts # Accept multicast and anycast packets
# dropBcasts # Silently Drop multicast and anycast packets
# dropNotSyn # Silently Drop Non-syn TCP packets # dropNotSyn # Silently Drop Non-syn TCP packets
# rejNotSyn # Silently Reject Non-syn TCP packets # rejNotSyn # Silently Reject Non-syn TCP packets
# dropInvalid # Silently Drop packets that are in the INVALID # dropInvalid # Silently Drop packets that are in the INVALID

4
Shorewall6/blacklist
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Blacklist File # Shorewall6 version 4 - Blacklist File
# #
# For information about entries in this file, type "man shorewall-blacklist" # For information about entries in this file, type "man shorewall6-blacklist"
# #
# Please see http://shorewall.net/blacklisting_support.htm for additional # Please see http://shorewall.net/blacklisting_support.htm for additional
# information. # information.

6
Shorewall6/hosts
View File

@ -1,10 +1,10 @@
# #
# Shorewall version 4 - Hosts file # Shorewall6 version 4 - Hosts file
# #
# For information about entries in this file, type "man shorewall-hosts" # For information about entries in this file, type "man shorewall6-hosts"
# #
# The manpage is also online at # The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-hosts.html # http://www.shorewall.net/manpages6/shorewall6-hosts.html
# #
############################################################################### ###############################################################################
#ZONE HOST(S) OPTIONS #ZONE HOST(S) OPTIONS

6
Shorewall6/init
View File

@ -1,10 +1,10 @@
# #
# Shorewall version 4 - Init File # Shorewall6 version 4 - Init File
# #
# /etc/shorewall/init # /etc/shorewall6/init
# #
# Add commands below that you want to be executed at the beginning of # Add commands below that you want to be executed at the beginning of
# a "shorewall start" or "shorewall restart" command. # a "shorewall6 start" or "shorewall6 restart" command.
# #
# For additional information, see # For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm # http://shorewall.net/shorewall_extension_scripts.htm

14
Shorewall6/initdone
View File

@ -1,14 +0,0 @@
#
# Shorewall version 4 - Initdone File
#
# /etc/shorewall/initdone
#
# Add commands below that you want to be executed during
# "shorewall start" or "shorewall restart" commands at the point where
# Shorewall has not yet added any perminent rules to the builtin chains.
#
# For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm
#
###############################################################################
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

7
Shorewall6/ipsec
View File

@ -1,7 +0,0 @@
#
# The /etc/shorewall/ipsec file is obsolete -- the information
# previously contained in this file is now placed in the
# /etc/shorewall/zones file.
#
# See the IPSECFILE option in shorewall.conf for further information.
#

4
Shorewall6/maclist
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Maclist file # Shorewall6 version 4 - Maclist file
# #
# For information about entries in this file, type "man shorewall-maclist" # For information about entries in this file, type "man shorewall6-maclist"
# #
# For additional information, see http://shorewall.net/MAC_Validation.html # For additional information, see http://shorewall.net/MAC_Validation.html
# #

4
Shorewall6/macro.AllowICMPs
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - AllowICMPs Macro # Shorewall6 version 4 - AllowICMPs Macro
# #
# /usr/share/shorewall/macro.AllowICMPs # /usr/share/shorewall6/macro.AllowICMPs
# #
# This macro ACCEPTs needed ICMP types # This macro ACCEPTs needed ICMP types
# #

6
Shorewall6/macro.Amanda
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Amanda Macro # Shorewall6 version 4 - Amanda Macro
# #
# /usr/share/shorewall/macro.Amanda # /usr/share/shorewall6/macro.Amanda
# #
# This macro handles connections required by the AMANDA backup system # This macro handles connections required by the AMANDA backup system
# to back up remote nodes. It does not provide the ability to restore # to back up remote nodes. It does not provide the ability to restore
@ -14,7 +14,7 @@ PARAM - - udp 10080
# #
# You may also need this rule. With AMANDA 2.4.4 on Linux kernel 2.6, # You may also need this rule. With AMANDA 2.4.4 on Linux kernel 2.6,
# it should not be necessary to use this. The ip_conntrack_amanda # it should not be necessary to use this. The ip_conntrack_amanda
# kernel module should be loaded (via /etc/shorewall/modules) on all # kernel module should be loaded (via /etc/shorewall6/modules) on all
# systems which need to pass AMANDA traffic through netfilter. # systems which need to pass AMANDA traffic through netfilter.
#PARAM - - tcp 50000:50100 #PARAM - - tcp 50000:50100
# #

4
Shorewall6/macro.Auth
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Auth Macro # Shorewall6 version 4 - Auth Macro
# #
# /usr/share/shorewall/macro.Auth # /usr/share/shorewall6/macro.Auth
# #
# This macro handles Auth (identd) traffic. # This macro handles Auth (identd) traffic.
# #

6
Shorewall6/macro.BitTorrent
View File

@ -1,13 +1,13 @@
# #
# Shorewall version 4 - BitTorrent Macro # Shorewall6 version 4 - BitTorrent Macro
# #
# /usr/share/shorewall/macro.BitTorrent # /usr/share/shorewall6/macro.BitTorrent
# #
# This macro handles BitTorrent traffic. # This macro handles BitTorrent traffic.
# #
# If you are running a more modern BitTorrent client, then you may need # If you are running a more modern BitTorrent client, then you may need
# to tweak the open port range. This can be done by copying the below # to tweak the open port range. This can be done by copying the below
# rules into /etc/shorewall and making the necessary edits there: # rules into /etc/shorewall6 and making the necessary edits there:
# #
# Replace 6881:6889 with 6881:6899 # Replace 6881:6889 with 6881:6899
# #

4
Shorewall6/macro.CVS
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - CVS Macro # Shorewall6 version 4 - CVS Macro
# #
# /usr/share/shorewall/macro.CVS # /usr/share/shorewall6/macro.CVS
# #
# This macro handles connections to the CVS pserver. # This macro handles connections to the CVS pserver.
# #

4
Shorewall6/macro.DAAP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - DAAP Macro # Shorewall6 version 4 - DAAP Macro
# #
# /usr/share/shorewall/macro.DAAP # /usr/share/shorewall6/macro.DAAP
# #
# This macro handles DAAP (Digital Audio Access Protocol) traffic. # This macro handles DAAP (Digital Audio Access Protocol) traffic.
# The protocol is used by iTunes, Rythmbox and other similar daemons. # The protocol is used by iTunes, Rythmbox and other similar daemons.

4
Shorewall6/macro.DCC
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - DCC Macro # Shorewall6 version 4 - DCC Macro
# #
# /usr/share/shorewall/macro.DCC # /usr/share/shorewall6/macro.DCC
# #
# This macro handles DCC (Distributed Checksum Clearinghouse) traffic. # This macro handles DCC (Distributed Checksum Clearinghouse) traffic.
# DCC is a distributed spam filtering mechanism. # DCC is a distributed spam filtering mechanism.

4
Shorewall6/macro.DNS
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - DNS Macro # Shorewall6 version 4 - DNS Macro
# #
# /usr/share/shorewall/macro.DNS # /usr/share/shorewall6/macro.DNS
# #
# This macro handles DNS traffic. # This macro handles DNS traffic.
# #

4
Shorewall6/macro.Distcc
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Distcc Macro # Shorewall6 version 4 - Distcc Macro
# #
# /usr/share/shorewall/macro.Distcc # /usr/share/shorewall6/macro.Distcc
# #
# This macro handles connections to the Distributed Compiler service. # This macro handles connections to the Distributed Compiler service.
# #

4
Shorewall6/macro.Drop
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Drop Macro # Shorewall6 version 4 - Drop Macro
# #
# /usr/share/shorewall/macro.Drop # /usr/share/shorewall6/macro.Drop
# #
# This macro generates the same rules as the Drop default action # This macro generates the same rules as the Drop default action
# It is used in place of action.Drop when USE_ACTIONS=No. # It is used in place of action.Drop when USE_ACTIONS=No.

4
Shorewall6/macro.DropDNSrep
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - DropDNSrep Macro # Shorewall6 version 4 - DropDNSrep Macro
# #
# /usr/share/shorewall/macro.DropDNSrep # /usr/share/shorewall6/macro.DropDNSrep
# #
# This macro silently drops DNS UDP replies # This macro silently drops DNS UDP replies
# #

15
Shorewall6/macro.DropUPnP
View File

@ -1,15 +0,0 @@
#
# Shorewall version 4 - DropUPnP Macro
#
# /usr/share/shorewall/macro.DropUPnP
#
# This macro silently drops UPnP probes on UDP port 1900
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/
# PORT(S) PORT(S) LIMIT GROUP
COMMENT UPnP
DROP - - udp 1900
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

4
Shorewall6/macro.Edonkey
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Edonkey Macro # Shorewall6 version 4 - Edonkey Macro
# #
# /usr/share/shorewall/macro.Edonkey # /usr/share/shorewall6/macro.Edonkey
# #
# This macro handles Edonkey traffic. # This macro handles Edonkey traffic.
# #

4
Shorewall6/macro.FTP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - FTP Macro # Shorewall6 version 4 - FTP Macro
# #
# /usr/share/shorewall/macro.FTP # /usr/share/shorewall6/macro.FTP
# #
# This macro handles FTP traffic. # This macro handles FTP traffic.
# #

4
Shorewall6/macro.Finger
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Finger Macro # Shorewall6 version 4 - Finger Macro
# #
# /usr/share/shorewall/macro.Finger # /usr/share/shorewall6/macro.Finger
# #
# This macro handles Finger protocol. You should not generally open # This macro handles Finger protocol. You should not generally open
# your finger information to internet. # your finger information to internet.

4
Shorewall6/macro.GNUnet
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - GNUnet Macro # Shorewall6 version 4 - GNUnet Macro
# #
# /usr/share/shorewall/macro.GNUnet # /usr/share/shorewall6/macro.GNUnet
# #
# This macro handles GNUnet (secure peer-to-peer networking) traffic. # This macro handles GNUnet (secure peer-to-peer networking) traffic.
# #

4
Shorewall6/macro.GRE
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - GRE Macro # Shorewall6 version 4 - GRE Macro
# #
# /usr/share/shorewall/macro.GRE # /usr/share/shorewall6/macro.GRE
# #
# This macro (bi-directional) handles Generic Routing Encapsulation # This macro (bi-directional) handles Generic Routing Encapsulation
# traffic (RFC 1701) # traffic (RFC 1701)

4
Shorewall6/macro.Gnutella
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Gnutella Macro # Shorewall6 version 4 - Gnutella Macro
# #
# /usr/share/shorewall/macro.Gnutella # /usr/share/shorewall6/macro.Gnutella
# #
# This macro handles Gnutella traffic. # This macro handles Gnutella traffic.
# #

4
Shorewall6/macro.HTTP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - HTTP Macro # Shorewall6 version 4 - HTTP Macro
# #
# /usr/share/shorewall/macro.HTTP # /usr/share/shorewall6/macro.HTTP
# #
# This macro handles plaintext HTTP (WWW) traffic. # This macro handles plaintext HTTP (WWW) traffic.
# #

4
Shorewall6/macro.HTTPS
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - HTTPS Macro # Shorewall6 version 4 - HTTPS Macro
# #
# /usr/share/shorewall/macro.HTTPS # /usr/share/shorewall6/macro.HTTPS
# #
# This macro handles HTTPS (WWW over SSL) traffic. # This macro handles HTTPS (WWW over SSL) traffic.
# #

4
Shorewall6/macro.ICQ
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - ICQ Macro # Shorewall6 version 4 - ICQ Macro
# #
# /usr/share/shorewall/macro.ICQ # /usr/share/shorewall6/macro.ICQ
# #
# This macro handles ICQ, now called AOL Instant Messenger (or AIM). # This macro handles ICQ, now called AOL Instant Messenger (or AIM).
# #

4
Shorewall6/macro.IMAP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - IMAP Macro # Shorewall6 version 4 - IMAP Macro
# #
# /usr/share/shorewall/macro.IMAP # /usr/share/shorewall6/macro.IMAP
# #
# This macro handles plaintext IMAP traffic. For encrypted IMAP, # This macro handles plaintext IMAP traffic. For encrypted IMAP,
# see macro.IMAPS. # see macro.IMAPS.

4
Shorewall6/macro.IMAPS
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - IMAPS Macro # Shorewall6 version 4 - IMAPS Macro
# #
# /usr/share/shorewall/macro.IMAPS # /usr/share/shorewall6/macro.IMAPS
# #
# This macro handles encrypted IMAP traffic. For plaintext IMAP # This macro handles encrypted IMAP traffic. For plaintext IMAP
# (not recommended), see macro.IMAP. # (not recommended), see macro.IMAP.

4
Shorewall6/macro.IPIP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - IPIP Macro # Shorewall6 version 4 - IPIP Macro
# #
# /usr/share/shorewall/macro.IPIP # /usr/share/shorewall6/macro.IPIP
# #
# This macro (bidirectional) handles IPIP capsulation traffic # This macro (bidirectional) handles IPIP capsulation traffic
# #

4
Shorewall6/macro.IPPserver
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.2 - IPPserver Macro # Shorewall6 version 4 - IPPserver Macro
# #
# /usr/share/shorewall/macro.IPPserver # /usr/share/shorewall6/macro.IPPserver
# #
# This macro handles Internet Printing Protocol (IPP), indicating # This macro handles Internet Printing Protocol (IPP), indicating
# that DEST is a printing server for SOURCE. The macro allows # that DEST is a printing server for SOURCE. The macro allows

4
Shorewall6/macro.IPsec
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - IPsec Macro # Shorewall6 version 4 - IPsec Macro
# #
# /usr/share/shorewall/macro.IPsec # /usr/share/shorewall6/macro.IPsec
# #
# This macro (bidirectional) handles IPsec traffic # This macro (bidirectional) handles IPsec traffic
# #

4
Shorewall6/macro.IPsecah
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - IPsecah Macro # Shorewall6 version 4 - IPsecah Macro
# #
# /usr/share/shorewall/macro.IPsecah # /usr/share/shorewall6/macro.IPsecah
# #
# This macro (bidirectional) handles IPsec authentication (AH) traffic. # This macro (bidirectional) handles IPsec authentication (AH) traffic.
# This is insecure. You should use ESP with encryption for security. # This is insecure. You should use ESP with encryption for security.

4
Shorewall6/macro.IPsecnat
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - IPsecnat Macro # Shorewall6 version 4 - IPsecnat Macro
# #
# /usr/share/shorewall/macro.IPsecnat # /usr/share/shorewall6/macro.IPsecnat
# #
# This macro (bidirectional) handles IPsec traffic and Nat-Traversal # This macro (bidirectional) handles IPsec traffic and Nat-Traversal
# #

4
Shorewall6/macro.JAP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - JAP Macro # Shorewall6 version 4 - JAP Macro
# #
# /usr/share/shorewall/macro.JAP # /usr/share/shorewall6/macro.JAP
# #
# This macro handles JAP Anon Proxy traffic. This macro is for # This macro handles JAP Anon Proxy traffic. This macro is for
# administrators running a Mix server. It is NOT for people trying # administrators running a Mix server. It is NOT for people trying

4
Shorewall6/macro.JabberPlain
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.4 - JabberPlain Macro # Shorewall6 version 4 - JabberPlain Macro
# #
# /usr/share/shorewall/macro.JabberPlain # /usr/share/shorewall6/macro.JabberPlain
# #
# This macro accepts Jabber traffic (plaintext). # This macro accepts Jabber traffic (plaintext).
# #

4
Shorewall6/macro.JabberSecure
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.4 - JabberSecure (ssl) Macro # Shorewall6 version 4 - JabberSecure (ssl) Macro
# #
# /usr/share/shorewall/macro.JabberSecure # /usr/share/shorewall6/macro.JabberSecure
# #
# This macro accepts Jabber traffic (ssl). # This macro accepts Jabber traffic (ssl).
# #

4
Shorewall6/macro.Jabberd
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.4 - Jabberd (server intercommunication) # Shorewall6 version 4 - Jabberd (server intercommunication)
# #
# /usr/share/shorewall/macro.Jabberd # /usr/share/shorewall6/macro.Jabberd
# #
# This macro accepts Jabberd intercommunication traffic # This macro accepts Jabberd intercommunication traffic
# #

4
Shorewall6/macro.Jetdirect
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.2 - Jetdirect Macro # Shorewall6 version 4 - Jetdirect Macro
# #
# /usr/share/shorewall/macro.Jetdirect # /usr/share/shorewall6/macro.Jetdirect
# #
# This macro handles HP Jetdirect printing. # This macro handles HP Jetdirect printing.
# #

4
Shorewall6/macro.L2TP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - L2TP Macro # Shorewall6 version 4 - L2TP Macro
# #
# /usr/share/shorewall/macro.L2TP # /usr/share/shorewall6/macro.L2TP
# #
# This macro (bidirectional) handles Layer 2 Tunneling Protocol traffic # This macro (bidirectional) handles Layer 2 Tunneling Protocol traffic
# (RFC 2661) # (RFC 2661)

4
Shorewall6/macro.LDAP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - LDAP Macro # Shorewall6 version 4 - LDAP Macro
# #
# /usr/share/shorewall/macro.LDAP # /usr/share/shorewall6/macro.LDAP
# #
# This macro handles plaintext LDAP traffic. For encrypted LDAP # This macro handles plaintext LDAP traffic. For encrypted LDAP
# traffic, see macro.LDAPS. Use of LDAPS is recommended (and is # traffic, see macro.LDAPS. Use of LDAPS is recommended (and is

4
Shorewall6/macro.LDAPS
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - LDAPS Macro # Shorewall6 version 4 - LDAPS Macro
# #
# /usr/share/shorewall/macro.LDAPS # /usr/share/shorewall6/macro.LDAPS
# #
# This macro handles encrypted LDAP traffic. For plaintext LDAP # This macro handles encrypted LDAP traffic. For plaintext LDAP
# traffic, see macro.LDAP. Use of LDAPS is recommended (and is # traffic, see macro.LDAP. Use of LDAPS is recommended (and is

4
Shorewall6/macro.Mail
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Mail Macro # Shorewall6 version 4 - Mail Macro
# #
# /usr/share/shorewall/macro.Mail # /usr/share/shorewall6/macro.Mail
# #
# This macro handles SMTP (email secure and insecure) traffic. # This macro handles SMTP (email secure and insecure) traffic.
# It's the aggregate of macro.SMTP, macro.SMTPS, macro.Submission. # It's the aggregate of macro.SMTP, macro.SMTPS, macro.Submission.

4
Shorewall6/macro.MySQL
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - MySQL Macro # Shorewall6 version 4 - MySQL Macro
# #
# /usr/share/shorewall/macro.MySQL # /usr/share/shorewall6/macro.MySQL
# #
# This macro handles connections to the MySQL server. # This macro handles connections to the MySQL server.
# #

4
Shorewall6/macro.NNTP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 NNTP Macro # Shorewall6 version 4 NNTP Macro
# #
# /usr/share/shorewall/macro.NNTP # /usr/share/shorewall6/macro.NNTP
# #
# This macro handles plaintext NNTP traffic (Usenet). For # This macro handles plaintext NNTP traffic (Usenet). For
# encrypted NNTP, see macro.NNTPS. # encrypted NNTP, see macro.NNTPS.

4
Shorewall6/macro.NNTPS
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 NNTPS Macro # Shorewall6 version 4 NNTPS Macro
# #
# /usr/share/shorewall/macro.NNTPS # /usr/share/shorewall6/macro.NNTPS
# #
# This macro handles encrypted NNTP traffic (Usenet). For # This macro handles encrypted NNTP traffic (Usenet). For
# plaintext NNTP, see macro.NNTP. # plaintext NNTP, see macro.NNTP.

4
Shorewall6/macro.NTP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - NTP Macro # Shorewall6 version 4 - NTP Macro
# #
# /usr/share/shorewall/macro.NTP # /usr/share/shorewall6/macro.NTP
# #
# This macro handles NTP traffic (ntpd). # This macro handles NTP traffic (ntpd).
# For broadcast NTP traffic, use NTPbrd Macro. # For broadcast NTP traffic, use NTPbrd Macro.

4
Shorewall6/macro.OpenVPN
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - OpenVPN Macro # Shorewall6 version 4 - OpenVPN Macro
# #
# /usr/share/shorewall/macro.OpenVPN Macro # /usr/share/shorewall6/macro.OpenVPN Macro
# #
# This macro handles OpenVPN traffic. # This macro handles OpenVPN traffic.
# #

4
Shorewall6/macro.PCA
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - PCA Macro # Shorewall6 version 4 - PCA Macro
# #
# /usr/share/shorewall/macro.PCA # /usr/share/shorewall6/macro.PCA
# #
# This macro handles PCAnywere (tm) # This macro handles PCAnywere (tm)
# #

4
Shorewall6/macro.POP3
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - POP3 Macro # Shorewall6 version 4 - POP3 Macro
# #
# /usr/share/shorewall/macro.POP3 # /usr/share/shorewall6/macro.POP3
# #
# This macro handles plaintext POP3 traffic. For encrypted POP3, # This macro handles plaintext POP3 traffic. For encrypted POP3,
# see macro.POP3S. # see macro.POP3S.

4
Shorewall6/macro.POP3S
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - POP3S Macro # Shorewall6 version 4 - POP3S Macro
# #
# /usr/share/shorewall/macro.POP3S # /usr/share/shorewall6/macro.POP3S
# #
# This macro handles encrypted POP3 traffic. For plaintext POP3, # This macro handles encrypted POP3 traffic. For plaintext POP3,
# see macro.POP3. # see macro.POP3.

4
Shorewall6/macro.PPtP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - PPTP Macro # Shorewall6 version 4 - PPTP Macro
# #
# /usr/share/shorewall/macro.PPtP Macro # /usr/share/shorewall6/macro.PPtP Macro
# #
# This macro handles PPTP traffic. # This macro handles PPTP traffic.
# #

4
Shorewall6/macro.PostgreSQL
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - PostgreSQL Macro # Shorewall6 version 4 - PostgreSQL Macro
# #
# /usr/share/shorewall/macro.PostgreSQL # /usr/share/shorewall6/macro.PostgreSQL
# #
# This macro handles connections to the PostgreSQL server. # This macro handles connections to the PostgreSQL server.
# #

4
Shorewall6/macro.Printer
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.2 - Printer Macro # Shorewall6 version 4 - Printer Macro
# #
# /usr/share/shorewall/macro.Printer # /usr/share/shorewall6/macro.Printer
# #
# This macro handles Line Printer protocol printing. # This macro handles Line Printer protocol printing.
# #

4
Shorewall6/macro.RDP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 3.2 - RDP Macro # Shorewall6 version 4 - RDP Macro
# #
# /usr/share/shorewall/macro.RDP # /usr/share/shorewall6/macro.RDP
# #
# This macro handles Microsoft RDP (Remote Desktop) traffic. # This macro handles Microsoft RDP (Remote Desktop) traffic.
# #

4
Shorewall6/macro.RNDC
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - RNDC Macro # Shorewall6 version 4 - RNDC Macro
# #
# /usr/share/shorewall/macro.RNDC # /usr/share/shorewall6/macro.RNDC
# #
# This macro handles RNDC (BIND remote management protocol) traffic. # This macro handles RNDC (BIND remote management protocol) traffic.
# #

4
Shorewall6/macro.Rdate
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Rdate Macro # Shorewall6 version 4 - Rdate Macro
# #
# /usr/share/shorewall/macro.Rdate # /usr/share/shorewall6/macro.Rdate
# #
# This macro handles remote time retrieval (rdate). # This macro handles remote time retrieval (rdate).
# Unless you are supporting extremely old hardware or software, # Unless you are supporting extremely old hardware or software,

4
Shorewall6/macro.Reject
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Reject Macro # Shorewall6 version 4 - Reject Macro
# #
# /usr/share/shorewall/macro.Reject # /usr/share/shorewall6/macro.Reject
# #
# This macro generates the same rules as the Reject default action # This macro generates the same rules as the Reject default action
# It is used in place of action.Reject when USE_ACTIONS=No. # It is used in place of action.Reject when USE_ACTIONS=No.

14
Shorewall6/macro.Rfc1918
View File

@ -1,14 +0,0 @@
#
# Shorewall version 4 - Macro Template
#
# /usr/share/shorewall/macro.Rfc1918
#
# This macro handles pkts with a SOURCE or ORIGINAL DEST address reserved by RFC 1918
#############################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
FORMAT 2
PARAM SOURCE:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 \
DEST - - - - - -
PARAM SOURCE DEST - - - 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

4
Shorewall6/macro.Rsync
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - Rsync Macro # Shorewall6 version 4 - Rsync Macro
# #
# /usr/share/shorewall/macro.Rsync # /usr/share/shorewall6/macro.Rsync
# #
# This macro handles connections to the rsync server. # This macro handles connections to the rsync server.
# #

4
Shorewall6/macro.SANE
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - SANE Macro # Shorewall6 version 4 - SANE Macro
# #
# /usr/share/shorewall/macro.SANE # /usr/share/shorewall6/macro.SANE
# #
# This macro handles SANE network scanning. # This macro handles SANE network scanning.
# #

4
Shorewall6/macro.SMB
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - SMB Macro # Shorewall6 version 4 - SMB Macro
# #
# /usr/share/shorewall/macro.SMB # /usr/share/shorewall6/macro.SMB
# #
# This macro handles Microsoft SMB traffic. You need to invoke # This macro handles Microsoft SMB traffic. You need to invoke
# this macro in both directions. Beware! This rule opens a lot # this macro in both directions. Beware! This rule opens a lot

4
Shorewall6/macro.SMBBI
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - SMB Bi-directional Macro # Shorewall6 version 4 - SMB Bi-directional Macro
# #
# /usr/share/shorewall/macro.SMBBI # /usr/share/shorewall6/macro.SMBBI
# #
# This macro (bidirectional) handles Microsoft SMB traffic. # This macro (bidirectional) handles Microsoft SMB traffic.
# #

4
Shorewall6/macro.SMBswat
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - SMBswat Macro # Shorewall6 version 4 - SMBswat Macro
# #
# /usr/share/shorewall/macro.SMBswat # /usr/share/shorewall6/macro.SMBswat
# #
# This macro handles connections to the Samba Web Administration Tool # This macro handles connections to the Samba Web Administration Tool
# (SWAT). # (SWAT).

4
Shorewall6/macro.SMTP
View File

@ -1,7 +1,7 @@
# #
# Shorewall version 4 - SMTP Macro # Shorewall6 version 4 - SMTP Macro
# #
# /usr/share/shorewall/macro.SMTP # /usr/share/shorewall6/macro.SMTP
# #
# This macro handles plaintext SMTP (email) traffic. For SMTP # This macro handles plaintext SMTP (email) traffic. For SMTP
# encrypted over SSL, use macro.SMTPS. Note that STARTTLS can be # encrypted over SSL, use macro.SMTPS. Note that STARTTLS can be

25
Shorewall6/macro.SixXS
View File

@ -1,25 +0,0 @@
#
# Shorewall version 4 - SIXXS Macro
#
# /usr/share/shorewall/macro.SixXS
#
# This macro handles SixXS -- An IPv6 Deployment and Tunnel Broker
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE RATE USER/
# PORT(S) PORT(S) LIMIT GROUP
#
# Used for retrieving the tunnel information (eg by AICCU)
PARAM - - tcp 3874
#
# Used for signaling where the current IPv4 endpoint
# of the tunnel is and that it is alive
PARAM - - udp 3740
#
# Used for tunneling IPv6 over IPv4 (static + heartbeat tunnels)
PARAM - - 41
#
# Used for tunneling IPv6 over IPv4 (AYIYA
# tunnels)(5072 is official port, 8374 is used in the beta)
PARAM - - udp 5072,8374
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE