extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-03 12:09:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Change samples to DROP ping rather than REJECT

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8498 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-05-17 00:15:26 +00:00
parent 44472dd288
commit f1a1c7cd3a
3 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Samples/one-interface/rules
View File

@ -1,4 +1,4 @@
#
L#
# Shorewall version 4.0 - Sample Rules File for one-interface configuration.
# Copyright (C) 2006 by the Shorewall Team
#
@ -17,9 +17,9 @@
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK
# PORT PORT(S) DEST LIMIT GROUP
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded..
# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
Ping/REJECT net $FW
Ping/DROP net $FW
# Permit all ICMP traffic FROM the firewall TO the net zone

4
Samples/three-interfaces/rules
View File

@ -32,9 +32,9 @@ SSH/ACCEPT loc dmz
DNS/ACCEPT dmz net
# Reject Ping from the "bad" net zone.
# Drop Ping from the "bad" net zone.
Ping/REJECT net $FW
Ping/DROP net $FW
#
# Make ping work bi-directionally between the dmz, net, Firewall and local zone

4
Samples/two-interfaces/rules
View File

@ -30,10 +30,10 @@ SSH/ACCEPT loc $FW
Ping/ACCEPT loc $FW
#
# Reject Ping from the "bad" net zone.. and prevent your log from being flooded..
# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
#
Ping/REJECT net $FW
Ping/DROP net $FW
ACCEPT $FW loc icmp
ACCEPT $FW net icmp