From a959c4a3bb05ec65c21723c15778e1d1cca2e9bf Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Wed, 17 Feb 2016 16:18:33 -0800 Subject: [PATCH] Update the Events document for 5.0 Signed-off-by: Tom Eastep --- docs/Events.xml | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/docs/Events.xml b/docs/Events.xml index cf41ae00a..65cfab77c 100644 --- a/docs/Events.xml +++ b/docs/Events.xml @@ -538,8 +538,7 @@ SetEvent(SSH,ACCEPT,src) etc/shorewall/rules: - #ACTION SOURCE DEST PROTO DEST -# PORT(S) + #ACTION SOURCE DEST PROTO DPORT SSHLIMIT net $FW tcp 22 @@ -645,8 +644,7 @@ SSHLIMIT net $FW tcp 22 To duplicate the SSHLIMIT entry in /etc/shorewall/rules shown above: - #ACTION SOURCE DEST PROTO DEST -# PORT(S) + #ACTION SOURCE DEST PROTO DPORT AutoBL(SSH,-,-,-,REJECT,warn)\ net $FW tcp 22 @@ -688,8 +686,7 @@ Knock #Port Knocking # ?format 2 ############################################################################### -#ACTION SOURCE DEST PROTO DEST -# PORT(S) +#ACTION SOURCE DEST PROTO DPORT IfEvent(SSH,ACCEPT:info,60,1,src,reset)\ - - tcp 22 SetEvent(SSH,ACCEPT) - - tcp 1600 @@ -697,8 +694,7 @@ ResetEvent(SSH,DROP:info) etc/shorewall/rules: - #ACTION SOURCE DEST PROTO DEST -# PORT(S) + #ACTION SOURCE DEST PROTO DPORT Knock net $FW tcp 22,1599-1601