macro.NTPbrd: update macro header and description

Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini 2016-02-15 18:20:39 +02:00
parent 2612e012d6
commit efa019a782

View File

@ -1,17 +1,14 @@
#
# Shorewall - NTPbrd Macro
# Shorewall -- /usr/share/shorewall/macro.NTPbrd
#
# /usr/share/shorewall/macro.NTPbrd
# This macro handles NTP traffic including replies to Broadcast NTP traffic.
#
# This macro handles NTP traffic (ntpd) including replies to Broadcast
# NTP traffic.
#
# It is recommended only to use this where the source host is trusted -
# otherwise it opens up a large hole in your firewall because
# Netfilter doesn't track connections for broadcast traffic.
# It is recommended only to use this where the source host is trusted -
# otherwise it opens up a large hole in your firewall because
# Netfilter doesn't track connections for broadcast traffic.
#
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGIN RATE USER/
# PORT(S) PORT(S) DEST LIMIT GROUP
PARAM - - udp 123
PARAM - - udp 1024: 123
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER
PARAM - - udp 123
PARAM - - udp 1024: 123