extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-03 12:09:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Cleaned up additional rules from Debian package. Got rid of versions

Browse Source 
and paths in the header comments, since they're just as likely to be
wrong as not.  Changed all service names to port numbers.  eDonkey is a
big one - i wonder whether it isn't too variable for us to consider
providing a default rule.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2395 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
paulgear 2005-07-23 03:09:06 +00:00
parent b6649720cb
commit d8a471e7b9
18 changed files with 76 additions and 51 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Shorewall/action.AllowAmanda
View File

@ -1,11 +1,13 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowAmanda # Shorewall action.AllowAmanda
# #
# This action accepts connections required by the Amanda backup system. # This action accepts connections to the AMANDA backup system.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - udp amanda ACCEPT - - udp 10080
ACCEPT - - tcp 50000:50100 # Not sure why this is necessary - using ip_conntrack_amanda along with
# the above should be sufficient.
#ACCEPT - - tcp 50000:50100
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

4
Shorewall/action.AllowBitTorrent
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowBitTorrent # Shorewall action.AllowBitTorrent
# #
# This action accepts BitTorrent traffic. # This action accepts BitTorrent traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 6881:6889 ACCEPT - - tcp 6881:6889

6
Shorewall/action.AllowCVS
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowCVS # Shorewall action.AllowCVS
# #
# This action accepts connections required by the CVS server # This action accepts connections to the CVS pserver.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 2401 ACCEPT - - tcp 2401

7
Shorewall/action.AllowDistcc
View File

@ -1,9 +1,10 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowDistcc # Shorewall action.AllowDistcc
# #
# This action accepts connections required by the Distributed Compiler service # This action accepts connections to the Distributed Compiler
# service.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 3632 ACCEPT - - tcp 3632

24
Shorewall/action.AllowEdonkey
View File

@ -1,11 +1,31 @@
# #
# Shorewall 2.2 /usr/share/shorewall/action.AllowEdonkey # Shorewall action.AllowEdonkey
# #
# This action accepts Edonkey traffic # This action accepts Edonkey traffic.
# #
###################################################################################### ######################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/ #TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/
# PORT PORT(S) LIMIT GROUP # PORT PORT(S) LIMIT GROUP
ACCEPT - - tcp 4662 ACCEPT - - tcp 4662
ACCEPT - - udp 4665 ACCEPT - - udp 4665
#
# http://www.portforward.com/english/routers/port_forwarding/2wire/1000s/eDonkey.htm
# says to use udp 5737 rather than 4665
#
# http://www.amule.org/wiki/index.php/FAQ_ed2k says this:
# 4661 TCP (outgoing)
# Port, on which a server listens for connection (defined by server).
#4665 UDP (outgoing)
# used for global server searches and global source queries. This is
#always Server TCP port (in this case 4661) + 4.
#4662 TCP (outgoing and incoming)
# Client to client transfers.
#4672 UDP (outgoing and incoming)
# Extended eMule protocol, Queue Rating, File Reask Ping
#4711 TCP
# WebServer listening port.
#4712 TCP
# External Connection port. Used to communicate aMule with other
#applications such as aMule WebServer or aMuleCMD.
#
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

4
Shorewall/action.AllowGnutella
View File

@ -1,7 +1,7 @@
# #
# Shorewall 2.2 /usr/share/shorewall/action.AllowGnutella # Shorewall action.AllowGnutella
# #
# This action accepts gnutella traffic # This action accepts gnutella traffic.
# #
###################################################################################### ######################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/ #TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/

4
Shorewall/action.AllowICQ
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowICQ # Shorewall action.AllowICQ
# #
# This action accepts ICQ traffic. # This action accepts ICQ traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 5190 ACCEPT - - tcp 5190

8
Shorewall/action.AllowLDAP
View File

@ -1,10 +1,12 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowLDAP # Shorewall action.AllowLDAP
# #
# This action accepts LDAP traffic. # This action accepts LDAP traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp ldap ACCEPT - - tcp 389
# This is LDAPS - should it be included?
#ACCEPT - - tcp 636
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

6
Shorewall/action.AllowMySQL
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowMySQL # Shorewall action.AllowMySQL
# #
# This action accepts connections required by the MySQL server # This action accepts connections to the MySQL server.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 3306 ACCEPT - - tcp 3306

6
Shorewall/action.AllowPostgreSQL
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowPostgreSQL # Shorewall action.AllowPostgreSQL
# #
# This action accepts connections required by the PostgreSQL server # This action accepts connections to the PostgreSQL server.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 5432 ACCEPT - - tcp 5432

8
Shorewall/action.AllowRsync
View File

@ -1,10 +1,10 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowRsync # Shorewall action.AllowRsync
# #
# This action accepts connections required by the Rsync server # This action accepts connections to the rsync server.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp rsync ACCEPT - - tcp 873
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

7
Shorewall/action.AllowSMBswat
View File

@ -1,9 +1,10 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowSMBswat # Shorewall action.AllowSMBswat
# #
# This action accepts connections required by the Amanda backup system. # This action accepts connections to the Samba Web Administration
# Tool (SWAT).
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 901 ACCEPT - - tcp 901

4
Shorewall/action.AllowSPAMD
View File

@ -1,7 +1,7 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowSPAMD # Shorewall action.AllowSPAMD
# #
# This action accepts SPAMD traffic. # This action accepts Spam Assassin SPAMD traffic.
# #
###################################################################################### ######################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/ #TARGET SOURCE DEST PROTO DEST SOURCE RATE USER/

6
Shorewall/action.AllowSVN
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowSVN # Shorewall action.AllowSVN
# #
# This action accepts connections required by the Subversion server # This action accepts connections to the Subversion server.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - tcp 3690 ACCEPT - - tcp 3690

6
Shorewall/action.AllowSyslog
View File

@ -1,10 +1,10 @@
# #
# Shorewall 2.0 /etc/shorewall/action.AllowSyslog # Shorewall action.AllowSyslog
# #
# This action accepts syslog UDP traffic. # This action accepts syslog UDP traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
ACCEPT - - udp syslog ACCEPT - - udp 514
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

5
Shorewall/action.DropEdonkey
View File

@ -1,12 +1,11 @@
# #
# Shorewall 2.0 /etc/shorewall/action.DropEdonkey # Shorewall action.DropEdonkey
# #
# This action silently drops Edonkey Traffic. # This action silently drops Edonkey Traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
# PORT PORT(S) LIMIT GROUP
DROP - - tcp 4662 DROP - - tcp 4662
DROP - - udp 4665 DROP - - udp 4665
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

4
Shorewall/action.DropGnutella
View File

@ -1,9 +1,9 @@
# #
# Shorewall 2.0 /etc/shorewall/action.DropGnutella # Shorewall action.DropGnutella
# #
# This action silently drops Gnutella traffic. # This action silently drops Gnutella traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
DROP - - tcp 6346 DROP - - tcp 6346

6
Shorewall/action.DropSMTP
View File

@ -1,10 +1,10 @@
# #
# Shorewall 2.0 /etc/shorewall/action.DropSMTP # Shorewall action.DropSMTP
# #
# This action silently drops SMTP traffic. # This action silently drops SMTP traffic.
# #
###################################################################################### ################################################################################
#TARGET SOURCE DEST PROTO DEST SOURCE RATE #TARGET SOURCE DEST PROTO DEST SOURCE RATE
# PORT PORT(S) LIMIT # PORT PORT(S) LIMIT
DROP - - tcp smtp DROP - - tcp 25
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE