diff --git a/docs/Events.xml b/docs/Events.xml index cf41ae00a..65cfab77c 100644 --- a/docs/Events.xml +++ b/docs/Events.xml @@ -538,8 +538,7 @@ SetEvent(SSH,ACCEPT,src) etc/shorewall/rules: - #ACTION SOURCE DEST PROTO DEST -# PORT(S) + #ACTION SOURCE DEST PROTO DPORT SSHLIMIT net $FW tcp 22 @@ -645,8 +644,7 @@ SSHLIMIT net $FW tcp 22 To duplicate the SSHLIMIT entry in /etc/shorewall/rules shown above: - #ACTION SOURCE DEST PROTO DEST -# PORT(S) + #ACTION SOURCE DEST PROTO DPORT AutoBL(SSH,-,-,-,REJECT,warn)\ net $FW tcp 22 @@ -688,8 +686,7 @@ Knock #Port Knocking # ?format 2 ############################################################################### -#ACTION SOURCE DEST PROTO DEST -# PORT(S) +#ACTION SOURCE DEST PROTO DPORT IfEvent(SSH,ACCEPT:info,60,1,src,reset)\ - - tcp 22 SetEvent(SSH,ACCEPT) - - tcp 1600 @@ -697,8 +694,7 @@ ResetEvent(SSH,DROP:info) etc/shorewall/rules: - #ACTION SOURCE DEST PROTO DEST -# PORT(S) + #ACTION SOURCE DEST PROTO DPORT Knock net $FW tcp 22,1599-1601