configfiles: unified configuration file formatting

Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini 2015-11-09 10:24:20 +02:00
parent 8aefb3a998
commit f095e6f31d
72 changed files with 193 additions and 79 deletions

View File

@ -1,6 +1,8 @@
#
# Shorewall - Accounting File
#
# /etc/shorewall/accounting
#
# For information about entries in this file, type "man shorewall-accounting"
#
# Please see http://shorewall.net/Accounting.html for examples and

View File

@ -1,6 +1,8 @@
#
# Shorewall - Arprules File
#
# /etc/shorewall/arprules
#
# For information about entries in this file, type "man shorewall-arprules"
#
##############################################################################################################

View File

@ -1,6 +1,8 @@
#
# Shorewall - Blrules File
#
# /etc/shorewall/blrules
#
# For information about entries in this file, type "man shorewall-blrules"
#
# Please see http://shorewall.net/blacklisting_support.htm for additional

View File

@ -1,10 +1,13 @@
#
# Shorewall - Conntrack File
#
# /etc/shorewall/conntrack
#
# For information about entries in this file, type "man shorewall-conntrack"
#
##############################################################################################################
?FORMAT 3
##############################################################################################################
#ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH
# PORT(S) PORT(S) GROUP
?if $AUTOHELPERS && __CT_TARGET

View File

@ -1,6 +1,8 @@
#
# Shorewall - Ecn File
#
# /etc/shorewall/ecn
#
# For information about entries in this file, type "man shorewall-ecn"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall - Hosts file
#
# /etc/shorewall/hosts
#
# For information about entries in this file, type "man shorewall-hosts"
#
# The manpage is also online at

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall/init
#
# Add commands below that you want to be executed at the beginning of
# a "shorewall start", "shorewall-reload" or "shorewall restart" command.
# Add commands below that you want to be executed at the beginning of
# a "shorewall start", "shorewall-reload" or "shorewall restart" command.
#
# For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm

View File

@ -3,10 +3,10 @@
#
# /etc/shorewall/initdone
#
# Add commands below that you want to be executed during
# "shorewall start", "shorewall reload" or "shorewall restart" commands
# at the point where Shorewall has not yet added any permanent rules to
# the builtin chains.
# Add commands below that you want to be executed during
# "shorewall start", "shorewall reload" or "shorewall restart" commands
# at the point where Shorewall has not yet added any permanent rules to
# the builtin chains.
#
# For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm

View File

@ -1,6 +1,8 @@
#
# Shorewall - Interfaces File
#
# /etc/shorewall/interfaces
#
# For information about entries in this file, type "man shorewall-interfaces"
#
# The manpage is also online at

View File

@ -3,13 +3,13 @@
#
# /etc/shorewall/isusable
#
# This script is called when Shorewall is attempting to determine
# if an interface named in /etc/shorewall/providers is usable.
# This script is called when Shorewall is attempting to determine
# if an interface named in /etc/shorewall/providers is usable.
#
# The script is invoked inside a function that accepts an interface
# name as a single argument. The file below is designed to work with
# both swping and lsm as described at
# http://www.shorewall.net/MultiISP.html
# The script is invoked inside a function that accepts an interface
# name as a single argument. The file below is designed to work with
# both swping and lsm as described at
# http://www.shorewall.net/MultiISP.html
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -1,6 +1,8 @@
#
# Shorewall - Maclist file
#
# /etc/shorewall/maclist
#
# For information about entries in this file, type "man shorewall-maclist"
#
# For additional information, see http://shorewall.net/MAC_Validation.html

View File

@ -1,6 +1,8 @@
#
# Shorewall - Mangle File
#
# /etc/shorewall/mangle
#
# For information about entries in this file, type "man shorewall-mangle"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.
@ -9,6 +11,7 @@
#
# See http://shorewall.net/PacketMarking.html for a detailed description of
# the Netfilter/Shorewall packet marking mechanism.
#
####################################################################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES HELPER PROBABILITY DSCP
# PORT(S) PORT(S)

View File

@ -1,6 +1,8 @@
#
# Shorewall - Masq file
#
# /etc/shorewall/masq
#
# For information about entries in this file, type "man shorewall-masq"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall - Nat File
#
# /etc/shorewall/nat
#
# For information about entries in this file, type "man shorewall-nat"
#
# For additional information, see http://shorewall.net/NAT.htm

View File

@ -1,6 +1,8 @@
#
# Shorewall - Netmap File
#
# /etc/shorewall/netmap
#
# For information about entries in this file, type "man shorewall-netmap"
#
# See http://shorewall.net/netmap.html for an example and usage

View File

@ -3,25 +3,25 @@
#
# /etc/shorewall/params
#
# Assign any variables that you need here.
# Assign any variables that you need here.
#
# It is suggested that variable names begin with an upper case letter
# to distinguish them from variables used internally within the
# Shorewall programs
# It is suggested that variable names begin with an upper case letter
# to distinguish them from variables used internally within the
# Shorewall programs
#
# Example:
# Example:
#
# NET_IF=eth0
# NET_BCAST=130.252.100.255
# NET_OPTIONS=routefilter,norfc1918
# NET_IF=eth0
# NET_BCAST=130.252.100.255
# NET_OPTIONS=routefilter,norfc1918
#
# Example (/etc/shorewall/interfaces record):
# Example (/etc/shorewall/interfaces record):
#
# net $NET_IF $NET_BCAST $NET_OPTIONS
# net $NET_IF $NET_BCAST $NET_OPTIONS
#
# The result will be the same as if the record had been written
# The result will be the same as if the record had been written
#
# net eth0 130.252.100.255 routefilter,norfc1918
# net eth0 130.252.100.255 routefilter,norfc1918
#
###############################################################################

View File

@ -1,6 +1,8 @@
#
# Shorewall - Policy File
#
# /etc/shorewall/policy
#
# For information about entries in this file, type "man shorewall-policy"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall - Providers File
#
# /etc/shorewall/providers
#
# For information about entries in this file, type "man shorewall-providers"
#
# For additional information, see http://shorewall.net/MultiISP.html

View File

@ -1,6 +1,8 @@
#
# Shorewall - Proxyarp File
#
# /etc/shorewall/proxyarp
#
# For information about entries in this file, type "man shorewall-proxyarp"
#
# See http://shorewall.net/ProxyARP.htm for additional information.

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall/restored
#
# Add commands below that you want to be executed after shorewall has
# completed a 'restore' command.
# Add commands below that you want to be executed after shorewall has
# completed a 'restore' command.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -1,8 +1,11 @@
#
# Shorewall - Routes File
#
# /etc/shorewall/routes
#
# For information about entries in this file, type "man shorewall-routes"
#
# For additional information, see http://www.shorewall.net/MultiISP.html
#
###############################################################################
#PROVIDER DEST GATEWAY DEVICE OPTIONS

View File

@ -1,8 +1,11 @@
#
# Shorewall - Rtrules File
#
# /etc/shorewall/rtrules
#
# For information about entries in this file, type "man shorewall-rtrules"
#
# For additional information, see http://www.shorewall.net/MultiISP.html
#
####################################################################################
#SOURCE DEST PROVIDER PRIORITY MASK

View File

@ -1,6 +1,8 @@
#
# Shorewall - Rules File
#
# /etc/shorewall/rules
#
# For information on the settings in this file, type "man shorewall-rules"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall - Secmarks File
#
# /etc/shorewall/secmarks
#
# For information about entries in this file, type "man shorewall-secmarks"
#
############################################################################################################

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall/start
#
# Add commands below that you want to be executed after shorewall has
# been started, reloaded or restarted.
# Add commands below that you want to be executed after shorewall has
# been started, reloaded or restarted.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -3,15 +3,15 @@
#
# /etc/shorewall/started
#
# Add commands below that you want to be executed after shorewall has
# been completely started, reloaded or restarted. The difference between
# this extension script and /etc/shorewall/start is that this one is
# invoked after the 'shorewall' chain has been created (thus
# signaling that the firewall is completely up).
# Add commands below that you want to be executed after shorewall has
# been completely started, reloaded or restarted. The difference between
# this extension script and /etc/shorewall/start is that this one is
# invoked after the 'shorewall' chain has been created (thus
# signaling that the firewall is completely up).
#
# This script should not change the firewall configuration directly but
# may do so indirectly by running /sbin/shorewall with the 'nolock'
# option.
# This script should not change the firewall configuration directly but
# may do so indirectly by running /sbin/shorewall with the 'nolock'
# option.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall/stop
#
# Add commands below that you want to be executed at the beginning of a
# "shorewall stop" command.
# Add commands below that you want to be executed at the beginning of a
# "shorewall stop" command.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall/stopped
#
# Add commands below that you want to be executed at the completion of a
# "shorewall stop" command.
# Add commands below that you want to be executed at the completion of a
# "shorewall stop" command.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -1,6 +1,8 @@
#
# Shorewall - Stoppedrules File
#
# /etc/shorewall/stoppedrules
#
# For information about entries in this file, type "man shorewall-stoppedrules"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall - Tcclasses File
#
# /etc/shorewall/tcclasses
#
# For information about entries in this file, type "man shorewall-tcclasses"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
#
# Shorewall - Tcdevices File
#
# /etc/shorewall/tcdevices
#
# For information about entries in this file, type "man shorewall-tcdevices"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
#
# Shorewall - Tcfilters File
#
# /etc/shorewall/tcfilters
#
# For information about entries in this file, type "man shorewall-tcfilters"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
#
# Shorewall - Tcinterfaces File
#
# /etc/shorewall/tcinterfaces
#
# For information about entries in this file, type "man shorewall-tcinterfaces"
#
# See http://shorewall.net/simple_traffic_shaping.htm for additional

View File

@ -1,6 +1,8 @@
#
# Shorewall - Tcpri File
#
# /etc/shorewall/tcpri
#
# For information about entries in this file, type "man shorewall-tcpri"
#
# See http://shorewall.net/simple_traffic_shaping.htm for additional

View File

@ -1,6 +1,8 @@
#
# Shorewall - Tunnels File
#
# /etc/shorewall/tunnels
#
# For information about entries in this file, type "man shorewall-tunnels"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall - Zones File
#
# /etc/shorewall/zones
#
# For information about this file, type "man shorewall-zones"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Accounting File
#
# /etc/shorewall6/accounting
#
# For information about entries in this file, type "man shorewall6-accounting"
#
# Please see http://shorewall.net/Accounting.html for examples and

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Blrules File
#
# /etc/shorewall6/blrules
#
# For information about entries in this file, type "man shorewall6-blrules"
#
# Please see http://shorewall.net/blacklisting_support.htm for additional

View File

@ -1,10 +1,13 @@
#
# Shorewall6 - Conntrack File
#
# /etc/shorewall6/conntrack
#
# For information about entries in this file, type "man shorewall6-conntrack"
#
##############################################################################################################
?FORMAT 3
##############################################################################################################
#ACTION SOURCE DESTINATION PROTO DEST SOURCE USER/ SWITCH
# PORT(S) PORT(S) GROUP
?if $AUTOHELPERS && __CT_TARGET

View File

@ -1,5 +1,5 @@
#
# Shorewall - Findgw File
# Shorewall6 - Findgw File
#
# /etc/shorewall6/findgw
#

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Hosts file
#
# /etc/shorewall6/hosts
#
# For information about entries in this file, type "man shorewall6-hosts"
#
# The manpage is also online at

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall6/init
#
# Add commands below that you want to be executed at the beginning of
# a "shorewall6 start" or "shorewall6 restart" command.
# Add commands below that you want to be executed at the beginning of
# a "shorewall6 start" or "shorewall6 restart" command.
#
# For additional information, see
# http://shorewall.net/shorewall_extension_scripts.htm

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Interfaces File
#
# /etc/shorewall6/interfaces
#
# For information about entries in this file, type "man shorewall6-interfaces"
#
# The manpage is also online at

View File

@ -3,13 +3,13 @@
#
# /etc/shorewall6/isusable
#
# This script is called when Shorewall6 is attempting to determine
# if an interface named in /etc/shorewall6/providers is usable.
# This script is called when Shorewall6 is attempting to determine
# if an interface named in /etc/shorewall6/providers is usable.
#
# The script is invoked inside a function that accepts an interface
# name as a single argument. The file below is designed to work with
# both swping and lsm as described at
# http://www.shorewall.net/MultiISP.html
# The script is invoked inside a function that accepts an interface
# name as a single argument. The file below is designed to work with
# both swping and lsm as described at
# http://www.shorewall.net/MultiISP.html
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Maclist file
#
# /etc/shorewall6/maclist
#
# For information about entries in this file, type "man shorewall6-maclist"
#
# For additional information, see http://shorewall.net/MAC_Validation.html

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Mangle File
#
# /etc/shorewall6/mangle
#
# For information about entries in this file, type "man shorewall6-mangle"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.
@ -9,6 +11,7 @@
#
# See http://shorewall.net/PacketMarking.html for a detailed description of
# the Netfilter/Shorewall packet marking mechanism.
#
############################################################################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES HELPER HEADERS PROBABILITY DSCP
# PORT(S) PORT(S)

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Masq file
#
# /etc/shorewall6/masq
#
# For information about entries in this file, type "man shorewall6-masq"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Nat File
#
# /etc/shorewall6/nat
#
# For information about entries in this file, type "man shorewall6-nat"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Netmap File
#
# /etc/shorewall6/netmap
#
# For information about entries in this file, type "man shorewall-netmap"
#
# See http://shorewall.net/netmap.html for an example and usage

View File

@ -3,24 +3,24 @@
#
# /etc/shorewall6/params
#
# Assign any variables that you need here.
# Assign any variables that you need here.
#
# It is suggested that variable names begin with an upper case letter
# to distinguish them from variables used internally within the
# Shorewall6 programs
# It is suggested that variable names begin with an upper case letter
# to distinguish them from variables used internally within the
# Shorewall6 programs
#
# Example:
# Example:
#
# NET_IF=eth0
# NET_OPTIONS=dhcp,nosmurfs
# NET_IF=eth0
# NET_OPTIONS=dhcp,nosmurfs
#
# Example (/etc/shorewall6/interfaces record):
# Example (/etc/shorewall6/interfaces record):
#
# net $NET_IF - $NET_OPTIONS
# net $NET_IF - $NET_OPTIONS
#
# The result will be the same as if the record had been written
# The result will be the same as if the record had been written
#
# net eth0 - dhcp,nosmurfs
# net eth0 - dhcp,nosmurfs
#
###############################################################################

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Policy File
#
# /etc/shorewall6/policy
#
# For information about entries in this file, type "man shorewall6-policy"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Providers File
#
# /etc/shorewall6/providers
#
# For information about entries in this file, type "man shorewall6-providers"
#
# For additional information, see http://shorewall.net/MultiISP.html

View File

@ -1,5 +1,7 @@
#
# Shorewall - Proxyndp File
# Shorewall6 - Proxyndp File
#
# /etc/shorewall6/proxyndp
#
# For information about entries in this file, type "man shorewall6-proxyndp"
#

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall6/restored
#
# Add commands below that you want to be executed after shorewall6 has
# completed a 'restore' command.
# Add commands below that you want to be executed after shorewall6 has
# completed a 'restore' command.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -1,8 +1,11 @@
#
# Shorewall6 - Routes File
#
# /etc/shorewall6/routes
#
# For information about entries in this file, type "man shorewall6-routes"
#
# For additional information, see http://www.shorewall.net/MultiISP.html
#
###############################################################################
#PROVIDER DEST GATEWAY DEVICE OPTIONS

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Routestopped File
#
# /etc/shorewall6/routestopped
#
# This file is deprecated in favor of the stoppedrules file.
#
# For information about entries in this file, type "man shorewall6-routestopped"

View File

@ -1,8 +1,11 @@
#
# Shorewall6 - Rtrules File
#
# /etc/shorewall6/rtrules
#
# For information about entries in this file, type "man shorewall6-rtrules"
#
# For additional information, see http://www.shorewall.net/MultiISP.html
#
####################################################################################
#SOURCE DEST PROVIDER PRIORITY MASK

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Rules File
#
# /etc/shorewall6/rules
#
# For information on the settings in this file, type "man shorewall6-rules"
#
# The manpage is also online at

View File

@ -1,7 +1,7 @@
#
# Shorewall - Scfilter File
# Shorewall6 - Scfilter File
#
# /etc/shorewall/scfilter
# /etc/shorewall6/scfilter
#
# Replace the 'cat' command below to filter the output of
# 'show connections'.

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Secmarks File
#
# /etc/shorewall6/secmarks
#
# For information about entries in this file, type "man shorewall-secmarks"
#
############################################################################################################

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall6/start
#
# Add commands below that you want to be executed after shorewall6 has
# been started or restarted.
# Add commands below that you want to be executed after shorewall6 has
# been started or restarted.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -3,15 +3,15 @@
#
# /etc/shorewall6/started
#
# Add commands below that you want to be executed after shorewall6 has
# been completely started or restarted. The difference between this
# extension script and /etc/shorewall6/start is that this one is invoked
# after the 'shorewall' chain has been created (thus signaling that the
# firewall is completely up).
# Add commands below that you want to be executed after shorewall6 has
# been completely started or restarted. The difference between this
# extension script and /etc/shorewall6/start is that this one is invoked
# after the 'shorewall' chain has been created (thus signaling that the
# firewall is completely up).
#
# This script should not change the firewall configuration directly but
# may do so indirectly by running /sbin/shorewall6 with the 'nolock'
# option.
# This script should not change the firewall configuration directly but
# may do so indirectly by running /sbin/shorewall6 with the 'nolock'
# option.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall6/stop
#
# Add commands below that you want to be executed at the beginning of a
# "shorewall6 stop" command.
# Add commands below that you want to be executed at the beginning of a
# "shorewall6 stop" command.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -3,8 +3,8 @@
#
# /etc/shorewall6/stopped
#
# Add commands below that you want to be executed at the completion of a
# "shorewal6l stop" command.
# Add commands below that you want to be executed at the completion of a
# "shorewall6 stop" command.
#
# See http://shorewall.net/shorewall_extension_scripts.htm for additional
# information.

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Stoppedrules File
#
# /etc/shorewall6/stoppedrules
#
# For information about entries in this file,
# type "man shorewall6-stoppedrules"
#

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Tcclasses File
#
# /etc/shorewall6/tcclasses
#
# For information about entries in this file, type "man shorewall6-tcclasses"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Tcdevices File
#
# /etc/shorewall6/tcdevices
#
# For information about entries in this file, type "man shorewall6-tcdevices"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Tcfilters File
#
# /etc/shorewall6/tcfilters
#
# For information about entries in this file, type "man shorewall6-tcfilters"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Tcinterfaces File
#
# /etc/shorewall6/tcinterfaces
#
# For information about entries in this file,
# type "man shorewall6-tcinterfaces"
#

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Tcpri File
#
# /etc/shorewall6/tcpri
#
# For information about entries in this file, type "man shorewall6-tcpri"
#
# See http://shorewall.net/simple_traffic_shaping.htm for additional

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Tunnels File
#
# /etc/shorewall6/tunnels
#
# For information about entries in this file, type "man shorewall6-tunnels"
#
# The manpage is also online at

View File

@ -1,6 +1,8 @@
#
# Shorewall6 - Zones File
#
# /etc/shorewall6/zones
#
# For information about this file, type "man shorewall6-zones"
#
# The manpage is also online at